CVE-2015-2292 Yoast SEO <= 1.7.3.3 - Blind SQL Injection
MediumCVSS 6.5
EPSS 5.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin before 1.5.7, 1.6.x before 1.6.4, and 1.7.x before 1.7.4 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) order_by or (2) order parameter in the wpseo_bulk-editor page to wp-admin/admin.php. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary SQL commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yoast wordpress seo | <= 1.5.6 | No fix listed |
| yoast wordpress seo | = 1.6.0 | No fix listed |
| yoast wordpress seo | = 1.6.1 | No fix listed |
| yoast wordpress seo | = 1.6.2 | No fix listed |
| yoast wordpress seo | = 1.6.3 | No fix listed |
| yoast wordpress seo | = 1.7.1 | No fix listed |
| yoast wordpress seo | = 1.7.2 | No fix listed |
| yoast wordpress seo | = 1.7.3 | No fix listed |
| yoast wordpress seo | = 1.7.3.1 | No fix listed |
| yoast wordpress seo | = 1.7.3.2 | No fix listed |
| yoast wordpress seo | = 1.7.3.3 | No fix listed |
| wordpress-seo(WordPress) | < 1.5.7 | 1.5.7 |
| wordpress-seo(WordPress) | >= 1.6, < 1.6.4 | 1.6.4 |
| wordpress-seo(WordPress) | >= 1.7, < 1.7.4 | 1.7.4 |
References
- packetstormsecurity.com exploit
- 20150312 WordPress SEO by Yoast <= 1.7.3.3 - Blind SQL Injection exploit mailing-list
- 1031920 exploit vdb-entry
- wordpress.org
- wpvulndb.com exploit
- 36413 exploit
- yoast.com vendor-advisory
- Wordfence Intelligence third-party-advisory
- www.cve.org