SQL Injection Vulnerability in wpDataTables Plugin for WordPress
CVE-2014-9175
Currently unrated
Key Information:
- Vendor
Wordpress
- Status
- Vendor
- CVE Published:
- 2 December 2014
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2014-9175?
The wpDataTables plugin for WordPress is vulnerable to SQL injection through improper handling of the table_id parameter in the wpdatatables.php file. This security flaw allows remote attackers to execute arbitrary SQL commands via the get_wdtable action, potentially compromising the confidentiality and integrity of the site's database. Ensuring that your plugin is updated to a secure version can mitigate this risk effectively. For further details, you can refer to various security advisories and exploit reports found online.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.