PT-2015-5660 · Wonderplugin · Wonderplugin Audio Player

Kacper Szurek · Published 2015-03-03 · Updated 2015-03-04 · CVE-2015-2199

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WonderPlugin Audio Player plugin versions prior to 2.1

Description The issue allows remote authenticated users to execute arbitrary SQL commands via the item[id] parameter in a wonderplugin audio save item action to /wp-admin/admin-ajax.php or remote administrators to execute arbitrary SQL commands via the itemid parameter in the wonderplugin audio show item, wonderplugin audio show items, or wonderplugin audio edit item page to /wp-admin/admin.php.

Recommendations For WonderPlugin Audio Player plugin versions prior to 2.1, update to version 2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the /wp-admin/admin-ajax.php and /wp-admin/admin.php API endpoints until the update is applied. Avoid using the item[id] and itemid parameters in the affected actions and pages until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2015-2199

Affected Products

Wonderplugin Audio Player

References · 8

• 🔥 http://security.szurek.pl/wonderplugin-audio-player-20-blind-sql-injection-and-xss.html · Exploit
• 🔥 https://exploit-db.com/exploits/36086 · Exploit
• 🔥 http://exploit-db.com/exploits/36086 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-2199 · Security Note
• http://wonderplugin.com/wordpress-audio-player · Note
• http://osvdb.org/show/osvdb/118508 · Note
• http://osvdb.org/show/osvdb/118509 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2199 · Note