cbcvebase.
CVE-2017-5611
published 2017-01-30

CVE-2017-5611: SQL injection vulnerability in wp-includes/class-wp-query.php in WP_Query in WordPress before 4.7.2 allows remote attackers to execute arbitrary SQL commands…

PriorityP275critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
ITWVulnCheck KEV
Exploited in the wild
EPSS
9.93%
95.1th percentile
SQL injection vulnerability in wp-includes/class-wp-query.php in WP_Query in WordPress before 4.7.2 allows remote attackers to execute arbitrary SQL commands by leveraging the presence of an affected plugin or theme that mishandles a crafted post type name.

Affected

11 ranges
VendorProductVersion rangeFixed in
debiandebian_linux
debiandebian_linux
debianwordpress< wordpress 4.7.2+dfsg-1 (bookworm)wordpress 4.7.2+dfsg-1 (bookworm)
oracledata_integrator
oracledata_integrator
oracledata_integrator
wordpresswordpress<= 4.7.1
wordpresswordpress>= 0 < 4.7.2+dfsg-14.7.2+dfsg-1
wordpresswordpress>= 0 < 4.7.2+dfsg-14.7.2+dfsg-1
wordpresswordpress>= 0 < 4.7.2+dfsg-14.7.2+dfsg-1
wordpresswordpress>= 0 < 4.7.2+dfsg-14.7.2+dfsg-1

Detection & IOCsextracted from sources · hover to see the quote

pathwp-includes/class-wp-query.php
  • The vulnerability is triggered via a crafted post type name passed through plugins or themes to WP_Query; inspect HTTP requests containing unusual post_type parameter values for SQL metacharacters.

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv9.8CRITICAL
vulncheck9.8CRITICAL
vendor_debian9.8CRITICAL
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.