CVE-2022-21661 PoC — SQL injection in WordPress

Source

https://github.com/safe3s/CVE-2022-21661

Associated Vulnerability

Title:SQL injection in WordPress (CVE-2022-21661)
Description:WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WP_Query, there can be cases where SQL injection is possible through plugins or themes that use it in a certain way. This has been patched in WordPress version 5.8.3. Older affected versions are also fixed via security release, that go back till 3.7.37. We strongly recommend that you keep auto-updates enabled. There are no known workarounds for this vulnerability.

Description

The first poc video presenting the sql injection test from (  WordPress Core 5.8.2-'WP_Query'  / CVE-2022-21661)

Readme

# CVE-2022-21661
 POC Video | WordPress Core 5.8.2 - 'WP_Query' SQL Injection
 ![alt text](https://github.com/APTIRAN/CVE-2022-21661/blob/main/image/PIC.png?raw=true)
CVE-2022-21661 : EDB : https://www.exploit-db.com/exploits/50663

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!