Paid Memberships Pro < 2.9.8 - Unauthenticated SQL Injection via Order REST Route Code Parameter
Title source: llmExploitation Summary
CVE-2023-23488 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 5 public exploits from researchers including r3nt0n, cybfar, long-rookie, including a Metasploit module auxiliary/scanner/http/wp_paid_membership_pro_code_sqli.
A Nuclei detection template is also available.
AI-analyzed exploit summary This script checks for the presence of an unauthenticated time-based blind SQL injection vulnerability in Paid Memberships Pro WordPress plugin versions < 2.9.8. It does not directly exploit the vulnerability but generates sqlmap commands for further exploitation.
Description
The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the 'code' parameter of the '/pmpro/v1/order' REST route.
Exploits (5)
This script checks for the presence of an unauthenticated time-based blind SQL injection vulnerability in Paid Memberships Pro WordPress plugin versions < 2.9.8. It does not directly exploit the vulnerability but generates sqlmap commands for further exploitation.
The repository contains a Python script that checks for the presence of an unauthenticated SQL injection vulnerability (CVE-2023-23488) in the Paid Memberships Pro WordPress plugin. It does not directly exploit the vulnerability but generates sqlmap commands for further exploitation.
This repository contains a functional Python script that tests for an unauthenticated time-based blind SQL injection vulnerability in the Paid Memberships Pro WordPress plugin (CVE-2023-23488). The script confirms vulnerability by measuring response delays and provides sqlmap commands for exploitation.
The repository contains detailed technical analysis and proof-of-concept code for multiple WordPress plugin vulnerabilities, including SQL injection, CSV injection, and unauthenticated database reset. The README files provide in-depth explanations of the vulnerabilities, affected functions, and exploitation steps.
This Metasploit module exploits an unauthenticated SQL injection vulnerability in the WordPress Paid Membership Pro plugin (CVE-2023-23488) via the `code` parameter to dump usernames and password hashes from the `wp_users` table.
Nuclei Templates (1)
http.html:/wp-content/plugins/paid-memberships-pro/
body=/wp-content/plugins/paid-memberships-pro/
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H