CVE-2025-58788 PoC — WordPress plugin License Manager for WooCommerce SQL注入漏洞

Description

WordPress License Manager for WooCommerce Plugin <= 3.0.12 is vulnerable to SQL Injection

介绍

SINK: The searchProducts() function does not validate input, leading to a SQL Injection vulnerability in the $term variable.
<img width="1037" height="709" alt="image" src="https://github.com/user-attachments/assets/e0a238e3-50e7-442d-8308-0d6799b5bb76" />

- The dropdownDataSearch() function with $type= 'product' allows to control the $term variable while calling the searchProducts() function.
<img width="1073" height="435" alt="image" src="https://github.com/user-attachments/assets/bc5fbc2d-8996-4b52-a46c-08b2c8e67755" />
<img width="920" height="623" alt="image" src="https://github.com/user-attachments/assets/8b487343-4745-4354-8847-dc2471e9ae89" />

POC:
<img width="1918" height="1026" alt="image" src="https://github.com/user-attachments/assets/4e965008-c3ae-4381-8909-7dace7b60e2e" />

文件快照

备注