CVE-2021-32789
HIGH EXPLOITED IN THE WILD NUCLEIWooCommerce Gutenberg Blocks <2.5.16 - SQL Injection
Title source: llmExploitation Summary
CVE-2021-32789 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 2 public exploits from researchers including and0x00, DonVorrin. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a functional Go-based exploit for CVE-2021-32789, which targets a SQL injection vulnerability in WordPress WooCommerce. The exploit dumps user credentials by leveraging a crafted HTTP request to the WooCommerce REST API endpoint.
Description
woocommerce-gutenberg-products-block is a feature plugin for WooCommerce Gutenberg Blocks. An SQL injection vulnerability impacts all WooCommerce sites running the WooCommerce Blocks feature plugin between version 2.5.0 and prior to version 2.5.16. Via a carefully crafted URL, an exploit can be executed against the `wc/store/products/collection-data?calculate_attribute_counts[][taxonomy]` endpoint that allows the execution of a read only sql query. There are patches for many versions of this package, starting with version 2.5.16. There are no known workarounds aside from upgrading.
Exploits (2)
This repository contains a functional Go-based exploit for CVE-2021-32789, which targets a SQL injection vulnerability in WordPress WooCommerce. The exploit dumps user credentials by leveraging a crafted HTTP request to the WooCommerce REST API endpoint.
This repository contains a functional Python exploit for CVE-2021-32789, an authenticated blind SQL injection vulnerability in the WooCommerce plugin for WordPress. The exploit automates the extraction of database information, including tables and columns, via crafted requests to the vulnerable endpoint.
Nuclei Templates (1)
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N