CVE-2021-25114

CRITICALNuclei

Paid Memberships Pro < 2.6.7 - Unauthenticated Blind SQL Injection

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2021-25114 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

The Paid Memberships Pro WordPress plugin before 2.6.7 does not escape the discount_code in one of its REST route (available to unauthenticated users) before using it in a SQL statement, leading to a SQL injection

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Apr 11, 2024 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

Affected products and versions

2
ProductSourceVersion range

Paid Memberships Pro

CVE List2.6.7 to < 2.6.7affected

paid_memberships_pro

Browse strangerstudios / paid_memberships_pro
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryCRITICALWordPress Paid Memberships Pro <2.6.7 - Blind SQL InjectionCVSS 9.8

WordPress Paid Memberships Pro plugin before 2.6.7 is susceptible to blind SQL injection. The plugin does not escape the discount_code in one of its REST routes before using it in a SQL statement. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

Impact

Successful exploitation of this vulnerability could allow an attacker to extract sensitive information from the database.

Remediation

Upgrade to WordPress Paid Memberships Pro version 2.6.7 or later to mitigate this vulnerability.

WeaknessesCWE-89
Authorstheamanrawat
Template tagstime-based-sqlicve2021cvewp-pluginwpsqlipaid-memberships-prowpscanwordpressstrangerstudiosvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:strangerstudios:paid_memberships_pro:*:*:*:*:*:wordpress:*:*
Shodan: http.html:/wp-content/plugins/paid-memberships-pro/
FOFA: body=/wp-content/plugins/paid-memberships-pro/
Google: inurl:"/wp-content/plugins/paid-memberships-pro"
https://wpscan.com/vulnerability/6c25a5f0-a137-4ea5-9422-8ae393d7b76b https://wordpress.org/plugins/paid-memberships-pro/ https://nvd.nist.gov/vuln/detail/CVE-2021-25114 https://www.paidmembershipspro.com/pmpro-update-2-6-7-security-release/ https://github.com/ARPSyndicate/kenzer-templates

Source: ProjectDiscovery

References

3