WordPress Plugin Vulnerabilities

WP User Frontend < 3.5.25 - Admin+ SQL Injection

Description

The plugin does not validate and escape the post_id parameter from the Subscribers list before using in a SQL statement, leading to an SQL injection

Proof of Concept

Affects Plugins

Plugin icon
wp-user-frontend
Fixed in 3.5.25

References

URL
https://plugins.trac.wordpress.org/changeset/2631872

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
6.8 (medium)

Miscellaneous

Verified
Yes
WPVDB ID
7458ac0a-7737-42a6-a430-7b3aa7564841

Timeline

Publicly Published
2021-11-18 (about 4 years ago)
Added
2021-11-18 (about 4 years ago)
Last Updated
2021-11-18 (about 4 years ago)

Other

Published
Title
Published
2021-10-16
Title
Speed Booster Pack < 4.3.3.1 - Admin+ SQL Injection
Published
2025-03-24
Title
WP Multistore Locator <= 2.5.2 - Unauthenticated SQL Injection
Published
2022-05-11
Title
Five Minute Webshop <= 1.3.2 - Admin+ SQLi via orderby
Published
2025-06-23
Title
Amely < 3.2.0 - Unauthenticated SQL Injection
Published
2022-11-21
Title
Dokan < 3.7.6 - Unauthenticated SQLi