WordPress Plugin PICA Photo Gallery SQL Injection Vulnerability

A SQL injection vulnerability has been identified in the WordPress Plugin PICA Photo Gallery version 1.0. This vulnerability allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the aid parameter. Exploitation of this vulnerability could lead to the extraction of sensitive database information, including user credentials and table contents.

Impact

Exploitation of this vulnerability allows for arbitrary SQL execution, which could be used to manipulate the database or extract sensitive information such as user credentials.

Reproduction

To reproduce this vulnerability, send a GET request to the WordPress site with the PICA Photo Gallery plugin active. Include a crafted SQL payload in the aid parameter. The injected SQL will be executed by the database, allowing access to sensitive information such as user credentials and database table contents.