CVE-2022-0739 — AI Deep Analysis Summary

🚨 **Essence**: SQL Injection (SQLi) in BookingPress plugin. 💥 **Consequences**: Attackers can manipulate database queries via AJAX requests, leading to data theft or site compromise.

🛡️ **CWE-89**: Improper Neutralization of Special Elements used in an SQL Command.…

📦 **Product**: BookingPress – Appointments Booking Calendar Plugin. 📉 **Affected**: Versions **before 1.0.11**. ✅ **Fixed**: In version 1.0.11 and later.

🕵️ **Capabilities**: Dump WordPress user credentials, access database metadata, and perform arbitrary blind SQL injection. 📂 **Impact**: Full database access and potential server takeover.

🔓 **Threshold**: **LOW**. The exploit is **Unauthenticated**. No login or special configuration is needed to trigger the vulnerability via AJAX POST requests.

💣 **Public Exp**: **YES**. Multiple PoCs exist on GitHub (Python, Bash scripts). 🌍 **Wild Exploitation**: High risk due to ease of use and unauthenticated nature.

🔍 **Check**: Scan for BookingPress plugin version < 1.0.11. 🧪 **Test**: Use provided PoC scripts (e.g., `cve-2022-0739.py`) against the target URL to verify SQLi presence.

🔧 **Official Fix**: **YES**. Update the BookingPress plugin to **version 1.0.11 or higher**. 📝 **Ref**: WordPress Trac changeset 2684789.

🚧 **Workaround**: If patching is delayed, disable the BookingPress plugin temporarily or restrict access to the `bookingpress_front_get_category_services` AJAX endpoint via WAF rules.

⚡ **Priority**: **CRITICAL**. Unauthenticated SQLi allows immediate data breach. 🚀 **Action**: Patch immediately. Do not wait.