WordPress Rich Snippet Site Report Plugin SQL Injection Vulnerability

A SQL injection vulnerability has been identified in the Rich Snippet Site Report plugin for WordPress, affecting all versions through 2.0.0105. The vulnerability arises from inadequate escaping of user-supplied parameters, allowing unauthenticated attackers to inject additional SQL queries. This exploitation could lead to the extraction of sensitive information from the database. Additionally, the vulnerability can be exploited through Cross-Site Request Forgery (CSRF).

Impact

Exploitation of this vulnerability allows for SQL injection, where attackers can manipulate SQL queries to extract sensitive data from the database.

Reproduction

To reproduce this vulnerability, send a POST request to the 'wp_ajax_easysnippetGet' endpoint with the 'last' parameter. The injected SQL code can be crafted to manipulate the existing SQL query and extract desired information from the database.

Remediation

No known patch is available. It is recommended to uninstall the affected plugin and find a replacement.