This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login.
Read the full analysis โ
Q1What is this vulnerability? (Essence + Consequences)
๐จ **Essence**: SQL Injection in 'Collapsing Categories' plugin. ๐ฅ **Consequences**: Attackers can extract sensitive database info via the REST API. ๐ **Impact**: High confidentiality loss (CVSS C:H).
Q2Root Cause? (CWE/Flaw)
๐ก๏ธ **CWE**: CWE-89 (SQL Injection). ๐ **Flaw**: Insufficient escaping of the 'taxonomy' parameter. ๐ **Root**: Lack of SQL preparation in the query logic.
Q3Who is affected? (Versions/Components)
๐ฆ **Vendor**: robfelty. ๐ฑ **Product**: Collapsing Categories (WordPress Plugin). ๐ **Affected**: Versions **3.0.8 and earlier**. โ ๏ธ **Note**: WordPress core is mentioned but the flaw is in the plugin.
Q4What can hackers do? (Privileges/Data)
๐ต๏ธ **Action**: Execute arbitrary SQL queries. ๐พ **Data**: Extract sensitive information from the database. ๐ **Privilege**: Unauthenticated access required. No login needed!
๐ **Check**: Scan for `/wp-json/collapsing-categories/v1/get` endpoint. ๐ก **Tool**: Use Nuclei templates for CVE-2024-12025. ๐งช **Test**: Send crafted 'taxonomy' parameter to trigger SQL error.
Q8Is it fixed officially? (Patch/Mitigation)
๐ ๏ธ **Fix**: Update plugin to version **> 3.0.8**. ๐ **Patch**: Developer released fix (Changeset 3201979). โ **Status**: Fixed in newer versions.
Q9What if no patch? (Workaround)
๐ซ **Workaround**: Disable/Deactivate the plugin if not needed. ๐ก๏ธ **WAF**: Block suspicious SQL payloads in 'taxonomy' param. ๐ **Access Control**: Restrict REST API access if possible.