WordPress Plugin Vulnerabilities

All In One SEO < 4.1.5.3 - Authenticated SQL Injection

Description

The plugin is affected by an authenticated SQL injection issue, which was discovered during an internal audit by the Jetpack Scan team, and could grant attackers access to privileged information from the affected site’s database (e.g., usernames and hashed passwords).

Affects Plugins

Plugin icon
all-in-one-seo-pack
Fixed in 4.1.5.3

References

CVE
CVE-2021-25037
URL
https://jetpack.com/2021/12/14/severe-vulnerabilities-fixed-in-all-in-one-seo-plugin-version-4-1-5-3/
URL
https://plugins.trac.wordpress.org/changeset/2640944/all-in-one-seo-pack/trunk/app/Common/Api/PostsTerms.php

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
7.7 (high)

Miscellaneous

Original Researcher
Marc Montpas (Jetpack Scan)
Submitter
Marc Montpas (Jetpack Scan)
Submitter website
https://jetpack.com/scan
Submitter twitter
marcS0H
Verified
Yes
WPVDB ID
4cd2a57b-3e1a-4acf-aecb-201ed9f4ee6d

Timeline

Publicly Published
2021-12-14 (about 2 years ago)
Added
2021-12-14 (about 2 years ago)
Last Updated
2022-04-12 (about 2 years ago)

Other

Published
Title
Published
2015-07-06
Title
Yet Another Stars Rating <= 0.9.0 - Authenticated Blind SQL Injection
Published
2021-07-23
Title
Easy Testimonial Manager <= 1.2.0 - Authenticated SQL Injection
Published
2021-03-26
Title
Quiz And Survey Master < 7.1.12 - Authenticated SQL injection via shortcode
Published
2023-11-06
Title
Icons Font Loader < 1.1.2.1 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2021-10-11
Title
Affiliate Manager < 2.8.7 - Admin+ SQL injection