CVSS base score
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
What the vulnerability does
Product Catalog 8 1.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the selectedCategory parameter. Attackers can submit POST requests to the admin-ajax.php endpoint with the UpdateCategoryList action to extract sensitive database information from WordPress tables.
Explanation of Vulnerability in Simple Terms
Product Catalog 8 versions 1.2.0 and later contain a SQL injection vulnerability in an unspecified component. An attacker on the network can inject malicious SQL commands without authentication or user interaction, potentially reading sensitive database contents. The affected version range appears malformed in the source data.
What an attacker can do
Read or modify database contents by injecting SQL commands through the application.
Potential impact on your site
Attackers can access or alter sensitive data stored in the database without logging in.
Conditions required to exploit
Network access to the application; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
