WP-PageNavi < 4.6.0 SQL Injection Vulnerability Analysis and POC

Vulnerability Overview This vulnerability involves an SQL injection flaw in the WordPress plugin "WP-PageNavi" in versions prior to 4.6.0. Attackers can craft specific URL requests to exploit this vulnerability, execute arbitrary SQL commands, and potentially gain access to sensitive data or take control of the database. Impact Scope Affected Product: WordPress plugin "WP-PageNavi" Affected Versions: All versions prior to 4.6.0 Vulnerability Type: SQL Injection Vulnerability Location: function in the file Remediation Upgrade Version: Upgrade the "WP-PageNavi" plugin to version 4.6.0 or higher. Temporary Mitigation: If an immediate upgrade is not possible, disable the plugin or restrict access to affected pages. POC Code ```php <?php // Example POC code // Note: This code is for demonstration purposes only. Ensure you have proper authorization before using it. $target_url = "http://example.com/?paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=1&orderby=1&order=asc&post_type=page&posts_per_page=10&paged=

Goal Reached Thanks to every supporter — we hit 100%!

WP-PageNavi < 4.6.0 SQL Injection Vulnerability Analysis and POC