CVE-2022-25148

CRITICALNuclei

WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_id

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2022-25148 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit and 1 Nuclei template.

Description

The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_id parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive information, in versions up to and including 13.1.5.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1
Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

WP Statistics

Browse WP Statistics / WP Statistics
CVE List13.1.5 to ≤ 13.1.5affected

Proofs of concept

1

Catalogued exploits

ExploitDBWP Statistics Plugin 13.1.5 current_page_id - Time based SQL injection (Unauthenticated)ExploitDB exploitby psychoSherlockNot analyzed1 file
ExploitDB
PoC details

Nuclei templates

1
ProjectDiscoveryCRITICALWordPress Plugin WP Statistics <= 13.1.5 - SQL InjectionCVSS 9.8

The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_id parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive information, in versions up to and including 13.1.5.

Impact

Unauthenticated attackers can execute time-based SQL injection through the current_page_id parameter to extract the complete WordPress database including user credentials, visitor statistics, and site analytics data.

Remediation

Update wp-statistics plugin to version 13.1.6, or newer.

WeaknessesCWE-89
Authorstheamanrawat
Template tagstime-based-sqlicvecve2022packetstormsqliwpscanwordpresswp-pluginwpwp-statisticsveronalabsvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:veronalabs:wp_statistics:*:*:*:*:*:wordpress:*:*
Shodan: http.html:/wp-content/plugins/wp-statistics/
FOFA: body=/wp-content/plugins/wp-statistics/
Google: inurl:/wp-content/plugins/wp-statistics
https://wordpress.org/plugins/wp-statistics/ https://gist.github.com/Xib3rR4dAr/5dbd58b7f57a5037fe461fba8e696042 https://nvd.nist.gov/vuln/detail/CVE-2022-25148 http://packetstormsecurity.com/files/174482/WordPress-WP-Statistics-13.1.5-SQL-Injection.html https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2679983%40wp-statistics&new=2679983%40wp-statistics&sfp_email=&sfph_mail=

Source: ProjectDiscovery

References

5