CVE-2023-0900

HIGHNuclei

AP Pricing Tables Lite <= 1.1.6 - Admin+ SQLi

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-0900 has a selected CVSS score of 7.2 (high); EIP currently links 1 Nuclei template.

Description

The Pricing Table Builder WordPress plugin through 1.1.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high-privilege users such as admins.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 8, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Pricing Table Builder

Default status: affected

CVE ListThrough 1.1.6affected

Nuclei templates

1
ProjectDiscoveryHIGHAP Pricing Tables Lite <= 1.1.6 - SQL InjectionCVSS 7.2

The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high-privilege users such as admins.

Impact

Authenticated high-privilege attackers (admin) can exploit SQL injection through the table_id parameter in the copy_table action to extract database contents, potentially stealing user credentials and compromising the WordPress database.

Remediation

Update AP Pricing Tables Lite plugin to a version newer than 1.1.6 that uses parameterized queries or prepared statements for the table_id parameter in admin-ajax.php.

WeaknessesCWE-89
Authorsr3Y3r53
Template tagstime-based-sqlicve2023cvesqliwordpresswp-pluginwpauthenticatedwpscanap-pricing-tables-litewpdevartvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:wpdevart:pricing_table_builder:*:*:*:*:*:wordpress:*:*
Shodan: http.html:wp-content/plugins/ap-pricing-tables-lite
FOFA: body=wp-content/plugins/ap-pricing-tables-lite
https://wpscan.com/vulnerability/f601e637-a486-4f3a-9077-4f294ace7ea1 https://github.com/WPPlugins/ap-pricing-tables-lite https://nvd.nist.gov/vuln/detail/CVE-2023-0900

Source: ProjectDiscovery

References

2