🔙 목록으로 돌아가기

CVE-2022-21661: WordPress <5.8.3 - SQL Injection

TitleWordPress <5.8.3 - SQL Injection
AuthorMarcio Mendes
SeverityHigh
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data manipulation, or data leakage.
RemediationThis has been patched in 5.8.3. Older affected versions are also fixed via security release, that go back till 3.7.37. We strongly recommend that you keep auto-updates enabled. There are no known workarounds for this vulnerability.
CVSS Score7.5
EPSS Score0.90904
CVE IDCVE-2022-21661
CWE IDCWE-89
Shodan Querycpe:"cpe:2.3:a:wordpress:wordpress"http.component:"wordpress"
Tags cve2022 cve wp sqli wpquery wpscan packetstorm wordpress vkev vuln

🔍 Vulnerability Description

WordPress before 5.8.3 is susceptible to SQL injection through multiple plugins or themes due to improper sanitization in WP_Query, An attacker can potentially obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

🌐 HTTP Request

POST /wp-admin/admin-ajax.php HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15
Connection: close
Content-Length: 183
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

action=ecsload&query={"tax_query":{"0":{"field":"term_taxonomy_id","terms":[""]}}}&ecs_ajax_settings={"post_id":"1", "current_page":1, "widget_id":1, "theme_id":1, "max_num_pages":10}

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-21661.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-21661.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A