Frontend Admin by DynamiApps SQL Injection Vulnerability in WordPress Plugin

A SQL injection vulnerability has been identified in the Frontend Admin by DynamiApps WordPress plugin, affecting all versions through 3.28.28. The vulnerability arises from inadequate escaping of user-supplied data in the 'order' parameter, allowing authenticated attackers with administrator privileges to inject additional SQL queries. This exploitation requires a valid 'orderby' parameter to access the vulnerable code that integrates the 'order' value into the SQL query.

Impact

Successful exploitation allows authenticated attackers to manipulate SQL queries, potentially leading to unauthorized data access or modification.

Reproduction

To reproduce this vulnerability, an authenticated user with administrator rights can send a request to the WordPress site with the 'order' parameter included. It is essential to also include a valid 'orderby' parameter in the same request. The vulnerable plugin will process the 'order' parameter without proper sanitization, allowing the injection of malicious SQL code.

Remediation

Users are advised to update the Frontend Admin by DynamiApps plugin to version 3.28.29 or later.