WordPress Plugin Vulnerabilities
Ajax Load More < 5.3.2 - Authenticated SQL Injection
Description
The Ajax Load More WordPress plugin was vulnerable to SQL Injection in POST /wp-admin/admin-ajax.php with param repeater=' or sleep(5)#&type=test.
The attacker needs to be authenticated with the edit_theme_options capability, which only administrators have by default.
Proof of Concept
https://drive.google.com/open?id=14YFYBUdMhYu1vvZrCd9QAhyZQv5rAwdm https://asciinema.org/a/LRCzXVCkKrVlIkuLXNIKUQdhI
Affects Plugins
Fixed in 5.3.2 References
Classification
Type
SQLI
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Nguyen Khanh
Submitter
khanh
Verified
No
WPVDB ID
Timeline
Publicly Published
2020-05-18 (about 3 years ago)
Added
2020-05-18 (about 3 years ago)
Last Updated
2021-01-21 (about 3 years ago)
WPScan 