PT-2023-14292 · WordPress · Multimedial Images

Daniel Krohmer + 1 · Publicado 2023-01-02 · Atualizado 2025-04-11 · CVE-2022-4370

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions multimedial images WordPress plugin versions 1.0b and earlier

Description The issue arises from the multimedial images WordPress plugin not properly sanitizing and escaping a parameter before using it in a SQL statement. This leads to a SQL injection that can be exploited by users with a role as low as Admin.

Recommendations For multimedial images WordPress plugin versions 1.0b and earlier, update to a version that properly sanitizes and escapes parameters used in SQL statements to prevent SQL injection. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2022-4370

Produtos afetados

Multimedial Images

Referências · 6

• 🔥 https://bulletin.iese.de/post/multimedial-images_1-0b · Exploit
• 🔥 https://wpscan.com/vulnerability/cf336783-9959-413d-a5d7-73c7087426d8 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-4370 · Nota de Segurança
• https://t.me/cvenotify/118858 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2022-4370 · Aviso do Fabricante
• https://t.me/cvenotify/41618 · Publicação no Telegram