Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2021-25114

CWE-89 — SQL Injection5 documents5 sources
Severity
9.8CRITICAL
EPSS
78.5%
top 0.96%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
Unknown Paid Memberships PROStrangerstudios Paid Memberships PRO
Timeline
PublishedFeb 7
Latest updateFeb 8

Description

The Paid Memberships Pro WordPress plugin before 2.6.7 does not escape the discount_code in one of its REST route (available to unauthenticated users) before using it in a SQL statement, leading to a SQL injection

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5unknown/paid_memberships_pro2.6.7 — 2.6.7

🔴Vulnerability Details

3
GHSA
GHSA-hx6g-9577-37jq: The Paid Memberships Pro WordPress plugin before 2↗2022-02-08
▶
CVEList
Paid Memberships Pro < 2.6.7 - Unauthenticated Blind SQL Injection↗2022-02-07
▶
VulnCheck
strangerstudios paid_memberships_pro Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')↗2021
▶

💥Exploits & PoCs

1
Nuclei
WordPress Paid Memberships Pro <2.6.7 - Blind SQL Injection
▶
CVE-2021-25114 (CRITICAL CVSS 9.8) | The Paid Memberships Pro WordPress | cvebase.io