CVE-2022-21661 PoC — SQL injection in WordPress

Source

https://github.com/guestzz/CVE-2022-21661

Associated Vulnerability

Title: SQL injection in WordPress (CVE-2022-21661)
Description:WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WP_Query, there can be cases where SQL injection is possible through plugins or themes that use it in a certain way. This has been patched in WordPress version 5.8.3. Older affected versions are also fixed via security release, that go back till 3.7.37. We strongly recommend that you keep auto-updates enabled. There are no known workarounds for this vulnerability.

Description

CVE-2022-21661 exp for Elementor custom skin.

Readme

# CVE-2022-21661
CVE-2022-21661 exploit for Elementor custom skin.
![Screenshot](https://github.com/QWERTYisme/CVE-2022-21661/blob/main/image.png)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →