{"id":16190,"date":"2019-08-28T17:40:08","date_gmt":"2019-08-29T01:40:08","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2019\/08\/28\/news-9932\/"},"modified":"2019-08-28T17:40:08","modified_gmt":"2019-08-29T01:40:08","slug":"news-9932","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2019\/08\/28\/news-9932\/","title":{"rendered":"Multiple WordPress Plugins SQL Injection Vulnerabilities"},"content":{"rendered":"
\n
\n

Introduction<\/h2>\n

In July 2019, Fortinet\u2019s FortiGuard Labs discovered and reported nine SQL injection vulnerabilities in nine different popular WordPress plugins across a variety of categories, including advertisement, donation, gallery, forms, newsletter, and video player. These plugins are being actively used by hundreds of thousands of WordPress websites, with some of them ranked in the top position for their corresponding category.<\/p>\n

All discovered vulnerabilities have been assigned a FortiGuard Labs identity that includes details and corresponding CVE ID: FG-VD-19-092<\/a>, FG-VD-19-094<\/a>, FG-VD-19-095<\/a>, FG-VD-19-096<\/a>, FG-VD-19-097<\/a>, FG-VD-19-098<\/a>, FG-VD-19-099<\/a>, FG-VD-19-101<\/a> and FG-VD-19-102<\/a>.<\/p>\n

An interesting point is eight out of nine vulnerabilities were found with the same simple code pattern that made them vulnerable to a SQL injection. In spite of the potential for exploit, many developers simply do not carefully filter user-supplied data. And in this case, this happened despite WordPress Core\u2019s efforts, since they support various built-in methods to ensure that any user-supplied data is well-sanitized.<\/p>\n

In this blog post, we will go through the set of WordPress security mechanisms, analyze some of the discovered vulnerabilities, and explain the ways an attacker could exploit these vulnerabilities and how to prevent them \u2013 all from a developer\u2019s perspective.<\/p>\n

At the time of writing, all of the issues identified in this blog have been fixed and published by their respective vendors. Fortinet\u2019s FortiGuard Labs appreciates their quick responses and timely fixes.<\/p>\n

Background<\/h2>\n

A SQL injection occurs when user input is used to construct a SQL query without being properly sanitized. Consider the following example:<\/p>\n<\/p><\/div>\n