CVE-2024-2876 — AI Deep Analysis Summary

🚨 **Essence**: Critical SQL Injection (SQLi) in WordPress Plugin 'Email Subscribers'. 💥 **Consequences**: Attackers can append malicious SQL queries.…

🛡️ **Root Cause**: CWE-89 (SQL Injection). 🔍 **Flaw**: Insufficient escaping of user-supplied parameters in the `run` function of the `IG_ES_Subscribers_Query` class.…

📦 **Affected**: WordPress Plugin: **Email Subscribers & Newsletters** by Icegram. 📉 **Versions**: All versions up to and including **5.7.14**. 🌐 **Scope**: Over 90,000 websites potentially at risk.

🕵️ **Attacker Actions**: Unauthenticated attackers can execute arbitrary SQL. 📊 **Impact**: Extract sensitive info (user creds, emails), modify/delete data, or gain administrative control.…

⚡ **Threshold**: LOW. 🔓 **Auth**: **Unauthenticated**. No login required. ⚙️ **Config**: Low complexity (AC:L). Easy to exploit remotely.

💣 **Exploitation**: YES. 📂 **PoCs**: Multiple public Proof-of-Concept scripts available on GitHub (e.g., c0d3zilla, Quantum-Hacker). 🌍 **Risk**: Wild exploitation is highly likely given the low barrier to entry.

🔎 **Self-Check**: Scan for the plugin 'Email Subscribers'. 📋 **Version Check**: Verify if installed version is ≤ 5.7.14. 🛠️ **Tools**: Use WordPress security scanners or check `wp-content/plugins/email-subscribers/` for …

✅ **Fixed**: YES. 🔧 **Patch**: Version **5.7.15** and above are patched. 📝 **Reference**: See WordPress Plugin Directory changeset 3060251 for fix details.

🚧 **No Patch?**: Disable the plugin immediately. 🔒 **Mitigation**: If active use is critical, implement strict WAF rules to block SQLi payloads in the `IG_ES_Subscribers_Query` endpoint.…

🔥 **Urgency**: CRITICAL. 🚀 **Priority**: **IMMEDIATE ACTION**. 💡 **Reason**: CVSS 9.8, unauthenticated, public PoCs, and high impact. Patch to v5.7.15+ now.