WordPress Plugin Vulnerabilities

Advanced Page Visit Counter < 6.1.6 - Subscriber+ Blind SQL injection

Description

The plugin does not escape the artID parameter before using it in a SQL statement in the apvc_reset_count_art AJAX action, available to any authenticated user, leading to a SQL injection

Proof of Concept

Affects Plugins

Plugin icon
advanced-page-visit-counter
Fixed in 6.1.6

References

CVE
CVE-2021-24957

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
7.7 (high)

Miscellaneous

Original Researcher
Krzysztof Zając
Submitter
Krzysztof Zając
Submitter website
https://kazet.cc/
Verified
Yes
WPVDB ID
a282606f-6abf-4f75-99c9-dab0bea8cc96

Timeline

Publicly Published
2022-03-29 (about 3 years ago)
Added
2022-03-29 (about 3 years ago)
Last Updated
2022-06-15 (about 3 years ago)

Other

Published
Title
Published
2014-08-01
Title
Spider Calendar 1.0.1 - spidercalendarbig_seemore.php calendar_id Parameter SQL Injection
Published
2019-01-07
Title
Ninja Forms < 3.3.21.2 - SQL Injection
Published
2025-05-07
Title
PDF Invoices for WooCommerce + Drag and Drop Template Builder < 5.4.0 - Authenticated (Administrator+) SQL Injection
Published
2021-10-13
Title
WP Cloudy < 4.4.9 - Admin+ SQL Injection
Published
2021-11-15
Title
StopBadBots < 6.67 - Unauthenticated SQL Injection