CVE-2024-1071 Scanner

WordPress Ultimate Member is a popular plugin utilized by WordPress website administrators for managing user profiles, registrations, logins, and content restrictions. It serves the purpose of creating member directories and controlling membership access on WordPress-based platforms. However, versions 2.1.3 to 2.8.2 of the plugin are vulnerable to SQL Injection attacks due to insufficient sanitization of user-supplied input and inadequate preparation of SQL queries.

The vulnerability detected in WordPress Ultimate Member versions 2.1.3 to 2.8.2 involves SQL Injection, allowing unauthenticated attackers to manipulate SQL queries via the 'sorting' parameter. Due to improper input validation and lack of query preparation, attackers can inject malicious SQL code into existing queries, potentially leading to unauthorized access to sensitive database information.

The SQL Injection vulnerability in WordPress Ultimate Member is exploited by crafting malicious POST requests to the '/wp-admin/admin-ajax.php' endpoint with a payload appended to the 'sorting' parameter. By injecting SQL commands, such as sleep(), attackers can delay responses and extract sensitive data from the database. The lack of proper input sanitization and query preparation exacerbates the risk of successful exploitation.

Exploiting the SQL Injection vulnerability in WordPress Ultimate Member may lead to unauthorized access to sensitive user data stored in the WordPress database. Attackers can extract user credentials, personal information, and other sensitive data, compromising the confidentiality and integrity of user accounts. Furthermore, the exploitation can facilitate further attacks, such as privilege escalation or credential theft.

Safeguard your WordPress website from SQL Injection vulnerabilities and protect sensitive user data by leveraging the comprehensive security scanning capabilities offered by the securityforeveryone platform. Join our platform to proactively identify and remediate vulnerabilities like CVE-2024-1071, ensuring the integrity of your WordPress site and the security of your users' information.

References:

• https://www.wordfence.com/blog/2024/02/2063-bounty-awarded-for-unauthenticated-sql-injection-vulnerability-patched-in-ultimate-member-wordpress-plugin/
• https://securityonline.info/cve-2024-1071-wordpress-ultimate-member-plugin-under-active-attack/