oss-sec mailing list archives

wordpress <= 4.8.1 SQLi

From: Slavco Mihajloski <slavco.mihajloski () gmail com>
Date: Mon, 25 Sep 2017 14:16:04 +0200

Isuue in wpdb->prepare() method guides to sqli in the wordpress.

https://wordpress.org/news/

https://medium.com/websec/wordpress-sqli-bbb2afcc8e94

PoC:
https://medium.com/websec/wordpress-sqli-poc-f1827c20bf8e

Regards,
Slavco

Current thread:

wordpress <= 4.8.1 SQLi Slavco Mihajloski (Sep 25)