CVE-2021-24915 — AI Deep Analysis Summary

🚨 **Essence**: SQL Injection in WordPress 'Contest Gallery' plugin. 📉 **Consequences**: Attackers can steal user lists (usernames & emails) and execute arbitrary SQL commands.…

🛡️ **CWE-89**: Improper Neutralization of Special Elements used in an SQL Command. 🐛 **Flaw**: The plugin fails to sanitize/escape the `cg-search-user-name-original` parameter before using it in SQL queries.…

📦 **Product**: Contest Gallery – Photo Contest Plugin for WordPress. 📅 **Affected Versions**: Pre-13.1.0.6. 🌐 **Platform**: WordPress sites running PHP/MySQL.

🕵️ **Privileges**: Unauthenticated access required! 📧 **Data**: Extracts ALL registered users' usernames and email addresses. 💻 **Action**: Full SQL injection execution possible.…

🔓 **Threshold**: LOW. 🚫 **Auth**: No authentication needed (Unauthenticated). ⚙️ **Config**: Exploits the 'export users from gallery' feature. 🎯 **Ease**: Direct parameter manipulation via `cg-search-user-name-original`.

📜 **PoC**: Yes, available via Nuclei templates (ProjectDiscovery). 🔍 **Detection**: Public YAML templates exist for automated scanning. 🌍 **Wild Exploit**: Likely widespread due to low barrier to entry and public PoCs.

🔍 **Check**: Scan for 'Contest Gallery' plugin version < 13.1.0.6. 🧪 **Test**: Use Nuclei template `CVE-2021-24915.yaml`. 📡 **Indicator**: Look for SQL errors or unexpected data in user export endpoints.

✅ **Fixed**: Yes. 🔄 **Patch**: Upgrade Contest Gallery plugin to version **13.1.0.6** or later. 🛠️ **Vendor Action**: WordPress Foundation/Plugin developer released the fix.

🚧 **Workaround**: Disable the 'Contest Gallery' plugin immediately if patching isn't possible. 🚫 **Block**: Restrict access to the plugin's export endpoints via WAF or firewall rules.…

🔥 **Priority**: HIGH. 📢 **Reason**: Unauthenticated SQLi is critical. 📧 **Risk**: Massive PII leak (emails/usernames). ⏱️ **Urgency**: Patch immediately to prevent data exfiltration and potential further exploitation.