Goal Reached Thanks to every supporter β€” we hit 100%!

Goal: 1000 CNY Β· Raised: 1000 CNY

100.0%

CVE-2022-0784 β€” AI Deep Analysis Summary

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: SQL Injection in WordPress 'Title Experiments Free' plugin. πŸ’₯ **Consequences**: Attackers can steal data, modify content, or hijack admin accounts via unsanitized input.

Q2Root Cause? (CWE/Flaw)

πŸ›‘οΈ **CWE-89**: Improper Neutralization of Special Elements used in an SQL Command. πŸ› **Flaw**: The `id` parameter in `wpex_titles` AJAX action is not escaped before SQL execution.

Q3Who is affected? (Versions/Components)

πŸ“¦ **Product**: WordPress Plugin 'Title Experiments Free'. πŸ“‰ **Affected**: Versions **before 9.0.1**. βœ… **Fixed**: Version 9.0.1 and later.

Q4What can hackers do? (Privileges/Data)

πŸ•΅οΈ **Privileges**: **Unauthenticated** access required. πŸ“‚ **Impact**: Can obtain sensitive info, modify database data, or execute unauthorized admin operations.

Q5Is exploitation threshold high? (Auth/Config)

⚑ **Threshold**: **LOW**. No login needed! The vulnerability is exposed via an AJAX action available to **anyone** on the internet.

Q6Is there a public Exp? (PoC/Wild Exploitation)

πŸ”“ **Exploit**: Yes. Public PoC exists via **Nuclei Templates** (ProjectDiscovery). Wild exploitation is highly likely due to ease of use.

Q7How to self-check? (Features/Scanning)

πŸ” **Check**: Scan for the plugin 'Title Experiments Free'. πŸ§ͺ **Test**: Send crafted SQL payloads to the `wpex_titles` AJAX endpoint with an `id` parameter.

Q8Is it fixed officially? (Patch/Mitigation)

πŸ”§ **Fix**: Update the plugin to **version 9.0.1 or higher**. The developer has released a patch to sanitize the input.

Q9What if no patch? (Workaround)

🚫 **Workaround**: If you can't update, **disable or delete** the plugin immediately. πŸ›‘ Block access to `wp-admin/admin-ajax.php` for this specific action if possible.

Q10Is it urgent? (Priority Suggestion)

πŸ”₯ **Priority**: **CRITICAL**. Unauthenticated SQLi is a high-severity threat. Patch immediately to prevent data breaches and site compromise.