TeconceTheme Coven Core SQL Injection Vulnerability

A blind SQL injection vulnerability has been identified in the TeconceTheme Coven Core WordPress plugin, specifically in versions through 1.3. This vulnerability arises from improper neutralization of special elements used in SQL commands, allowing malicious actors to interact with the database in unauthorized ways, such as extracting sensitive information.

Impact

Exploitation of this vulnerability allows for blind SQL injection, where an attacker can manipulate SQL queries and potentially access or modify database information.

Remediation

Users of the TeconceTheme Coven Core WordPress plugin are advised to update to a version later than 1.3, as no official patch is currently available. However, Patchstack has issued a mitigation rule to block attacks until a patch can be safely applied.