cve/2017/CVE-2017-14723.md

CVE-2017-14723

Description

Before version 4.8.2, WordPress mishandled % characters and additional placeholder values in $wpdb->prepare, and thus did not properly address the possibility of plugins and themes enabling SQL injection attacks.

POC

Reference

• https://medium.com/websec/wordpress-sqli-poc-f1827c20bf8e

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/Afetter618/WordPress-PenTest
• https://github.com/Byebyesky/IT-Security-Projekt
• https://github.com/CeCe2018/Codepath
• https://github.com/CeCe2018/Codepath-Week-7-Alternative-Assignment-Essay
• https://github.com/Tanvi20/Week-7-Alternative-Assignment-wp-cve