nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-0705 CVE-2024-0705
CRITICALNuclei
Stripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL Injection
Record summary
CVE-2024-0705 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.
Description
The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 3.7.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Description source: CVE List
Exploitation context
Available material
- Nuclei templates
- 1
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 22, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Payment Gateway of Stripe for WooCommerceBrowse themehigh / Payment Gateway of Stripe for WooCommerceDefault status: unaffected | CVE List | Through 3.7.9 | affected |
Nuclei templates
1ProjectDiscoveryCRITICALStripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL Injection
Stripe Payment Plugin for WooCommerce for WordPress versions up to 3.7.9 contains a sql_injection caused by insufficient escaping and lack of preparation on 'id' parameter, letting unauthenticated attackers execute arbitrary SQL queries, exploit requires sending crafted 'id' parameter.
Impact
Attackers can execute arbitrary SQL queries, potentially leading to data disclosure or modification of sensitive database information.
Remediation
Update to the latest version of the plugin, above 3.7.9, to fix the vulnerability.
AuthorsShivam Kamboj
Template tagscvecve2024wp-pluginwpwordpresswoocommercestripesqliunauthtime-based
https://nvd.nist.gov/vuln/detail/CVE-2024-0705 https://www.wordfence.com/threat-intel/vulnerabilities/id/2652a7fc-b610-40f1-8b76-2129f59390ec?source=cve
Source: ProjectDiscovery
References
3plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2954934%40payment-gateway-stripe-and-woocommerce-integration&new=2954934%40payment-gateway-stripe-and-woocommerce-integration&sfp_email=&sfph_mail= wordfence.com
https://www.wordfence.com/threat-intel/vulnerabilities/id/2652a7fc-b610-40f1-8b76-2129f59390ec?source=cve