PT-2022-9632 · WordPress · Wp User Frontend

Krzysztof Zając · Published 2022-01-24 · Updated 2022-06-05 · CVE-2021-25076

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WP User Frontend WordPress plugin versions prior to 3.5.26

Description The issue arises from the lack of validation and escaping of the status parameter before it is used in a SQL statement in the Subscribers dashboard. This oversight can lead to an SQL injection. Additionally, due to the insufficient sanitisation and escaping, it could also result in Reflected Cross-Site Scripting.

Recommendations For versions prior to 3.5.26, update to version 3.5.26 or later to resolve the issue. As a temporary workaround, consider restricting access to the Subscribers dashboard to minimize the risk of exploitation. Avoid using the status parameter in the affected SQL statement until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-25076

Affected Products

Wp User Frontend

References · 11

• 🔥 https://github.com/0xAbbarhSF/CVE-2021-25076 · Exploit
• 🔥 https://wpscan.com/vulnerability/6d3eeba6-5560-4380-a6e9-f008a9112ac6 · Exploit
• 🔥 http://packetstormsecurity.com/files/166071/WordPress-WP-User-Frontend-3.5.25-SQL-Injection.html · Exploit
• 🔥 https://exploit-db.com/exploits/50772 · Exploit
• https://osv.dev/vulnerability/CVE-2021-25076 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-25076 · Security Note
• https://plugins.trac.wordpress.org/changeset/2648715 · Patch
• https://t.me/cvenotify/25981 · Telegram Post
• https://t.me/cybersecuritytechnologies/6139 · Telegram Post
• https://t.me/cibsecurity/36103 · Telegram Post
• https://t.me/cvenotify/27136 · Telegram Post