PT-2022-13417 · WordPress · Simple Link Directory

Cydave · Published 2022-03-21 · Updated 2022-03-28 · CVE-2022-0760

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions The Simple Link Directory WordPress plugin versions prior to 7.7.2

Description The issue concerns an unauthenticated SQL Injection due to the lack of validation and escaping of the post id parameter in SQL statements via the /wp-admin/admin-ajax.php qcopd upvote action AJAX action. This action is accessible to both unauthenticated and authenticated users.

Recommendations For versions prior to 7.7.2, update to version 7.7.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the qcopd upvote action AJAX action until the update is applied.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2022-0760

Affected Products

Simple Link Directory

References · 5

• 🔥 https://wpscan.com/vulnerability/1c83ed73-ef02-45c0-a9ab-68a3468d2210 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-0760 · Security Note
• https://plugins.trac.wordpress.org/changeset/2684915 · Patch
• https://osv.dev/vulnerability/CVE-2022-0760 · Vendor Advisory
• https://t.me/cibsecurity/39334 · Telegram Post