WordPress Plugin Vulnerabilities

NotificationX < 2.3.9 - Unauthenticated Blind SQL Injection

Description

The plugin does not sanitise and escape the nx_id parameter before using it in a SQL statement, leading to an Unauthenticated Blind SQL Injection

Proof of Concept

Affects Plugins

Plugin icon
notificationx
Fixed in 2.3.9

References

CVE
CVE-2022-0349

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
8.6 (high)

Miscellaneous

Original Researcher
Krzysztof Zając
Submitter
Krzysztof Zając
Submitter website
https://kazet.cc/
Verified
Yes
WPVDB ID
1d0dd7be-29f3-4043-a9c6-67d02746463a

Timeline

Publicly Published
2022-02-02 (about 3 years ago)
Added
2022-02-02 (about 3 years ago)
Last Updated
2022-04-13 (about 3 years ago)

Other

Published
Title
Published
2014-08-01
Title
WordPress Landing Pages < 1.2.3 - module.redirect-ab-testing.php permalink_name Parameter SQL Injection
Published
2024-12-17
Title
VibeBP < 1.9.9.5.1 - Authenticated (Subscriber+) SQL Injection
Published
2014-08-01
Title
wp-private-messages - /wp-admin/profile.php msgid Parameter SQL Injection
Published
2018-05-27
Title
Membermouse < 2.2.9 - Blind SQL Injection
Published
2014-08-01
Title
GRAND Flash Album Gallery 0.55 - lib/hitcounter.php pid Parameter SQL Injection