Unauthenticated SQL Injection Vulnerability in Create by Mediavine Plugin for WordPress
CVE-2024-1711

9.8CRITICAL

Key Information:

Vendor
Wordpress
Status
Create By Mediavine
Vendor
CVE Published:
20 March 2024

Summary

The Mediavine Create plugin for WordPress is susceptible to an SQL Injection vulnerability via the 'id' parameter. All versions up to and including 1.9.4 are affected. The vulnerability arises from inadequate escaping of user-supplied parameters, coupled with a lack of sufficient preparation in the existing SQL query. This exploit enables unauthorized attackers to append additional SQL queries into the existing queries, potentially allowing them to extract sensitive data from the database. Users of the affected plugin should take immediate action to mitigate risks related to sensitive data exposure.

Affected Version(s)

Create by Mediavine * <= 1.9.4

References

https://www.wordfence.com/threat-intel/vulnerabilities/id...
https://wordpress.org/plugins/mediavine-create/

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Krzysztof Zając
.