Vulnerability · Published Apr 25, 2022 · Assigned by WPScan
CVE-2022-0769Users Ultra <= 3.1.0 - Unauthenticated SQL Injection
Critical 9.8
In plain English
A critical-severity SQL injection in Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 8.3% (higher than 95% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Official description
The Users Ultra WordPress plugin through 3.1.0 fails to properly sanitize and escape the data_target parameter before it is being interpolated in an SQL statement and then executed via the rating_vote AJAX action (available to both unauthenticated and authenticated users), leading to an SQL Injection.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin | 3.1.0 – through 3.1.0 |
Weakness: CWE-89