SureTriggers WordPress Plugin Unauthenticated SQL Injection Vulnerability

A SQL injection vulnerability has been identified in the SureTriggers WordPress plugin, specifically in versions prior to 1.1.23. The issue arises because the plugin fails to properly sanitize user input before incorporating it into SQL statements. This lack of input validation could enable unauthenticated attackers to execute SQL injection attacks.

Impact

Exploitation of this vulnerability allows for SQL injection, which could be used to manipulate database queries, potentially leading to unauthorized data access or modification.

Reproduction

The vulnerability can be reproduced by sending a crafted poll vote that includes unsanitized input, exploiting the SQL injection flaw. This can be done using a Python script that automates the process, confirming the injection by timing-based tests and extracting information such as the admin password hash.

Remediation

Users are advised to update the SureTriggers WordPress plugin to version 1.1.23 or later.