CVE-2024-3552

CRITICALNuclei

Web Directory Free < 1.7.0 - Unauthenticated SQL Injection

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-3552 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

The Web Directory Free WordPress plugin before 1.7.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection with different techniques like UNION, Time-Based and Error-Based.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 13, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Web Directory Free

Default status: unaffected

CVE ListBefore 1.7.0affected

Nuclei templates

1
ProjectDiscoveryCRITICALWeb Directory Free < 1.7.0 - SQL Injection

The plugin does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection with different techniques like UNION, Time-Based and Error-Based.

Impact

Unauthenticated attackers can execute time-based SQL injection attacks via the locations_ids parameter.

Remediation

Update Web Directory Free to version 1.7.0 or later.

Authorss4e-io
Template tagstime-based-sqlicvecve2024wordpresswp-pluginwpscanwpweb-directory-freevuln
CPE: cpe:2.3:a:salephpscripts:web_directory_free:*:*:*:*:wordpress:*:*:*
https://vulners.com/wpvulndb/CVE-2024-3552 https://wpscan.com/vulnerability/34b03ee4-de81-4fec-9f3d-e1bd5b94d136/

Source: ProjectDiscovery

References

2