What the vulnerability does
01Description
The Askeet plugin for WordPress is vulnerable to SQL Injection via the 'sql_query' parameter in multiple AJAX actions (askeet_execute_sql_query, askeet_export_all_results) in all versions up to, and including, 3.0. This is due to the askeet_is_safe_query() filter being bypassable using MySQL conditional comments (e.g., /*!UNION*/). The filter strips regular block comments before checking for forbidden SQL keywords, but MySQL interprets conditional comments as executable code. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Explanation of Vulnerability in Simple Terms
02Summary
Askeet contains a SQL injection vulnerability in versions up to 3.0 that allows high-privilege users to read sensitive database information without authorization. An attacker with administrative or elevated access can craft malicious input to extract data from the WooCommerce database. The vulnerability requires high-level privileges to exploit and does not affect data integrity or site availability.
What an attacker can do
03Attacker Capabilities
Read sensitive data from the WooCommerce database by injecting SQL commands.
Potential impact on your site
04Site Impact
A malicious admin or compromised high-privilege account can extract customer data, order details, or other sensitive WooCommerce information.
Conditions required to exploit
05Prerequisites
Attacker must have high-level administrative or elevated user privileges on the site.
Key dates
06Disclosure timeline
August 5, 2026
CVE published
