Goal Reached Thanks to every supporter โ€” we hit 100%!

Goal: 1000 CNY ยท Raised: 1336 CNY

100%

CVE-2024-30490 โ€” AI Deep Analysis Summary

CVSS 9.3 ยท Critical

Q1What is this vulnerability? (Essence + Consequences)

๐Ÿšจ **Essence**: A critical SQL Injection (SQLi) flaw in the WordPress Plugin **ProfileGrid**.โ€ฆ

Q2Root Cause? (CWE/Flaw)

๐Ÿ›ก๏ธ **Root Cause**: **CWE-89** (SQL Injection). The flaw stems from **insufficient escaping** of the user-supplied `search` parameter.โ€ฆ

Q3Who is affected? (Versions/Components)

๐Ÿ“ฆ **Affected**: **Metagauss**'s **ProfileGrid** plugin. ๐Ÿ“‰ **Versions**: All versions **up to and including 5.7.8**. ๐ŸŒ **Platform**: WordPress sites running this specific plugin.

Q4What can hackers do? (Privileges/Data)

๐Ÿ•ต๏ธ **Hackers Can**: Extract sensitive database data (User credentials, emails, posts). ๐Ÿ”„ **Modify** or **Delete** records.โ€ฆ

Q5Is exploitation threshold high? (Auth/Config)

๐Ÿ”“ **Threshold**: **LOW**. ๐Ÿšซ **Auth**: No authentication required (PR:N). ๐Ÿ–ฑ๏ธ **UI**: No user interaction needed (UI:N). ๐ŸŒ **Access**: Network accessible (AV:N). ๐Ÿ“ถ **Complexity**: Low (AC:L).โ€ฆ

Q6Is there a public Exp? (PoC/Wild Exploitation)

๐Ÿ” **Public Exp?**: **YES**. A Proof of Concept (PoC) is available via **Nuclei Templates** on GitHub. ๐Ÿ“‚ **Link**: `projectdiscovery/nuclei-templates`.โ€ฆ

Q7How to self-check? (Features/Scanning)

๐Ÿ”Ž **Self-Check**: Use vulnerability scanners like **Nuclei** with the specific CVE template. ๐Ÿ“ **Manual**: Check if the site uses ProfileGrid < 5.7.8.โ€ฆ

Q8Is it fixed officially? (Patch/Mitigation)

๐Ÿฉน **Official Fix**: **YES**. The vulnerability is tracked and patched. ๐Ÿ“ฆ **Action**: Update ProfileGrid to a version **greater than 5.7.8**.โ€ฆ

Q9What if no patch? (Workaround)

๐Ÿšง **No Patch?**: **WAF Rules**: Block SQL injection patterns in the `search` parameter. ๐Ÿ›‘ **Disable**: Temporarily disable the ProfileGrid plugin if not essential.โ€ฆ

Q10Is it urgent? (Priority Suggestion)

๐Ÿ”ฅ **Urgency**: **CRITICAL**. ๐Ÿšจ **Priority**: **P1**. With CVSS Vector indicating **High Confidentiality** and **Low Complexity**, this is an active threat. ๐Ÿƒ **Action**: Patch immediately.โ€ฆ