CVE-2023-23488 PoC — WordPress Plugin The Paid Memberships Pro SQL注入漏洞

Source

https://github.com/long-rookie/CVE-2023-23488-PoC

Associated Vulnerability

Title: WordPress Plugin The Paid Memberships Pro SQL注入漏洞 (CVE-2023-23488)
Description:The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the 'code' parameter of the '/pmpro/v1/order' REST route.

Description

Unauthenticated SQL Injection - Paid Memberships Pro < 2.9.8 (WordPress Plugin)

Readme

# CVE-2023-23488-PoC
Unauthenticated SQL Injection - Paid Memberships Pro &lt; 2.9.8 (WordPress Plugin)

Running this script against a WordPress instance with Paid Membership Pro plugin
tells you if the target is vulnerable.
As the SQL injection technique required to exploit it is Time-based blind, instead of
trying to directly exploit the vuln, it will generate the appropriate sqlmap command
to dump the whole database (probably very time-consuming) or specific chose data like
usernames and passwords.

Usage example:

```shell
python3 CVE-2023-23488.py http://127.0.0.1/wordpress
```


## References

+ Credits to **Joshua Martinelle**, who discovered the vulnerability
+ Vendor Homepage: https://www.paidmembershipspro.com
+ Vulnerable software Link: https://downloads.wordpress.org/plugin/paid-memberships-pro.2.9.7.zip
+ Advisory: https://github.com/advisories/GHSA-pppw-hpjp-v2p9

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →