Vulnerability · Published Feb 24, 2022 · Assigned by Wordfence
CVE-2022-25148WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_id
Critical 9.8
In plain English
A critical-severity SQL injection in WP Statistics from WP Statistics. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 80.9% (higher than 99.6% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Official description
The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_id parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive information, in versions up to and including 13.1.5.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| WP Statistics | WP Statistics | 13.1.5 – through 13.1.5 |
Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://gist.github.com/Xib3rR4dAr/5dbd58b7f57a5037fe461fba8e696042
- https://www.wordfence.com/vulnerability-advisories/#CVE-2022-25148
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2679983%40wp-statistics&new=2679983%40wp-statistics&sfp_email=&sfph_mail=
- http://packetstormsecurity.com/files/174482/WordPress-WP-Statistics-13.1.5-SQL-Injection.html