WordPress Plugin Vulnerabilities

WPcalc <= 2.1 - Authenticated SQL Injection

Description

The plugin does not sanitize user input into the 'did' parameter and uses it in a SQL statement, leading to an authenticated SQL Injection vulnerability.

Plugin author closed the plugin.

Proof of Concept

Affects Plugins

Plugin icon
wpcalc
No known fix

References

CVE
CVE-2021-25054

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
6.8 (medium)

Miscellaneous

Original Researcher
0xdecafbad
Verified
Yes
WPVDB ID
200969eb-e2a4-4200-82d7-0c313de089af

Timeline

Publicly Published
2021-12-06 (about 4 years ago)
Added
2021-12-09 (about 4 years ago)
Last Updated
2022-04-11 (about 3 years ago)

Other

Published
Title
Published
2024-08-26
Title
SendGrid for WordPress <= 1.4 - Unauthenticated SQL Injection
Published
2022-11-09
Title
WP CSV Exporter < 1.3.7 - Admin+ SQLi
Published
2015-07-08
Title
WP Shop <= 3.4.3.15 - Unauthenticated Blind SQL Injection
Published
2023-12-21
Title
Simply Schedule Appointments < 1.6.6.1 - Authenticated(Administrator+) SQL Injection
Published
2024-10-31
Title
Blrt WP Embed <= 1.6.9 - Authenticated (Contributor+) SQL Injection