Vulnerability · Published Apr 25, 2022 · Assigned by WPScan

CVE-2022-06575 Stars Rating Funnel < 1.2.53 - Unauthenticated SQLi

Critical 9.8

In plain English

A critical-severity SQL injection in 5 Stars Rating Funnel WordPress Plugin | RRatingg from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.7% (higher than 78% of all known vulnerabilities).

Severity (CVSS NVD)9.8Critical

Exploit odds (30 days)1.7%top 22.1% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

The 5 Stars Rating Funnel WordPress Plugin | RRatingg WordPress plugin before 1.2.54 does not properly sanitise, validate and escape lead ids before using them in a SQL statement via the rrtngg_delete_leads AJAX action, available to unauthenticated users, leading to an unauthenticated SQL injection issue. There is an attempt to sanitise the input, using sanitize_text_field(), however such function is not intended to prevent SQL injections.

Affected products (as reported)

Vendor	Product	Versions
Unknown	5 Stars Rating Funnel WordPress Plugin \| RRatingg	1.2.54 – before 1.2.54

Weakness: CWE-89

References

https://wpscan.com/vulnerability/e7fe8218-4ef5-4ef9-9850-8567c207e8e6 x_refsource_MISC