WordPress Authenticated SQL Injection
OWASP 2013-A1 OWASP 2017-A1 OWASP 2021-A3 PCI v3.2-6.5.1 OWASP PC-C3 CAPEC-66 CWE-89 HIPAA-164.306(a) & HIPAA-164.308(a) ISO27001-A.14.2.5 WASC-19 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H WSTG-INPV-05
An authenticated SQL injection is an injection attack of using wrong solutions for database abstraction library. Successful exploitation can have catastrophic effects on the whole WordPress ecosystem. Th WordPress versions before WordPress 2.3.0-4.7.5.
Depending on the back-end database configuration, its privilege setup and the operating system, a hacker can mount one or more of the following type of attacks :
- Reading, updating and deleting arbitrary data/tables from the database.
- Executing commands on the underlying operating system.
Beagle Security helps you to proactively secure your web apps & APIs
with automated penetration testing & actionable remediation insights.