PT-2022-13164 · WordPress · Ti Woocommerce Wishlist

Krzysztof Zając · Published 2022-02-28 · Updated 2024-03-20 · CVE-2022-0412

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TI WooCommerce Wishlist WordPress plugin versions prior to 1.40.1 TI WooCommerce Wishlist Pro WordPress plugin versions prior to 1.40.1

Description The issue allows unauthenticated attackers to perform SQL injection attacks due to the lack of sanitization and escaping of the item id parameter in SQL statements via the "wishlist/remove product" REST endpoint. This is a time-based SQL injection, and databases can be extracted using specific commands.

Recommendations For TI WooCommerce Wishlist WordPress plugin versions prior to 1.40.1, update to version 1.40.1 or later. For TI WooCommerce Wishlist Pro WordPress plugin versions prior to 1.40.1, update to version 1.40.1 or later. As a temporary workaround, consider restricting access to the "wishlist/remove product" REST endpoint until a patch is available.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2022-0412

Affected Products

Ti Woocommerce Wishlist

References · 9

• 🔥 https://github.com/TcherB31/CVE-2022-0412_Exploit · Exploit
• 🔥 https://wpscan.com/vulnerability/e984ba11-abeb-4ed4-9dad-0bfd539a9682 · Exploit
• https://osv.dev/vulnerability/CVE-2022-0412 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-0412 · Security Note
• https://twitter.com/HunterMapping/status/1770314997425729723 · Twitter Post
• https://twitter.com/RootMoksha/status/1769826682330816991 · Twitter Post
• https://twitter.com/0x_rood/status/1769713363712655517 · Twitter Post
• https://plugins.trac.wordpress.org/changeset/2668899 · Note
• https://twitter.com/HuTa0kj/status/1770398093399466267 · Twitter Post