{"id":2694,"date":"2020-11-30T17:55:00","date_gmt":"2020-11-30T22:55:00","guid":{"rendered":"https:\/\/eplatformmarketing.com\/?p=2694"},"modified":"2021-11-04T20:29:30","modified_gmt":"2021-11-05T01:29:30","slug":"sql-injection-vulnerability","status":"publish","type":"post","link":"https:\/\/eplatformmarketing.com\/blog\/sql-injection-vulnerability\/","title":{"rendered":"SQL Injection Vulnerability in WP Statistics"},"content":{"rendered":"

Sucuri<\/a> – WordPress Security Alert<\/h2>\n

SQL Injection Vulnerability article was written by John Castro<\/a>, a security analyst at the Sucuri<\/a> Security Operations Group<\/p>\n

Sucuri<\/a> is a world-class internet security organization<\/strong>. Sucuri is one of the very best security plug-ins and firewalls for a WordPress website<\/strong>. Sucuri provides public alerts for dangerous WordPress security risks. This alert concerns known risks with the WP Statistics<\/strong> plugin.<\/h4>\n

As part of a vulnerability research project for our Sucuri Firewall, we have been auditing popular open source projects looking for security issues.<\/p>\n

While working on the WordPress plugin WP Statistics, we discovered a SQL Injection vulnerability. This plugin is currently installed on 300,000+ websites.<\/p>\n

Are You at Risk from SQL Vulnerabilities?<\/h3>\n

This vulnerability is caused by the lack of sanitization in user provided data. An attacker with at least a subscriber account could leak sensitive data and under the right circumstances\/configurations compromise your WordPress installation.<\/p>\n

If you have a vulnerable version installed and your site allows user registration, you are definitely at risk.<\/p>\n

Technical Details<\/h3>\n

WordPress provides an API that enables developers to create content that users can inject to certain pages just using a simple shortcode:<\/p>\n

[shortcode atts_1=\u201dtest\u201d atts_2=\u201dtest\u201d]
\nAmong other functionalities, WP Statistics allows admin users to get detailed information related with the number of visits by just calling the shortcode below:<\/p>\n

The shortcode that allows admins to obtain detailed stat information.
\nThe WP Statistics shortcode that allows admins to obtain detailed visit information.
\nAs you can see on the above image, some attributes of the shortcode wpstatistics are being passed as parameters for important functions and this shouldn\u2019t be a problem if those parameters were sanitized, but as we\u2019ll see this is not the case.<\/p>\n

One of the vulnerable functions wp_statistics_searchengine_query() in the file \u201cincludes\/functions\/functions.php\u201d is accessible through WordPress\u2019 AJAX functionality thanks to the core function wp_ajax_parse_media_shortcode().<\/p>\n

This function doesn\u2019t check for additional privileges, allowing subscribers to execute this shortcode and inject malicious data to its attributes. (This attack vector was also described here).<\/p>\n

In a number places in the code, user input coming from attributes of the wpstatistics\u2019 shortcode are included in SQL queries without being sanitized. Below one of the queries that were exploitable:<\/p>\n

Shortcode parameters aren’t properly sanitized in the WP statistics shortcode.
\nShortcode parameters aren\u2019t properly sanitized in the WP Statistics plugin.
\nThe wp_statistics_searchengine_query() basically returns the same value as the one passed in the shortcode attribute provider and its content is added directly to the raw SQL query.<\/p>\n

Update as Soon as Possible<\/h3>\n

If you\u2019re using a vulnerable version of this plugin, update as soon as possible!<\/p>\n

In the event where you cannot do this, we strongly recommend leveraging the Sucuri Firewall<\/a> or equivalent technology to have the vulnerability patched virtually.<\/p>\n","protected":false},"excerpt":{"rendered":"

SQL injection vulnerability is caused by the lack of sanitization in user-provided data. An attacker with at least a subscriber account could leak sensitive data and under the right circumstances\/configurations compromise your WordPress installation.<\/p>\n

If you have a vulnerable version installed and your site allows user registration, you are definitely at risk.<\/p>\n","protected":false},"author":1,"featured_media":3752,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jnews-multi-image_gallery":[],"jnews_single_post":{"subtitle":"","format":"standard","video":"","gallery":"","source_name":"","source_url":"","via_name":"","via_url":"","override":[{"template":"1","single_blog_custom":"","parallax":"1","fullscreen":"1","layout":"right-sidebar","sidebar":"default-sidebar","second_sidebar":"default-sidebar","sticky_sidebar":"1","share_position":"top","share_float_style":"share-monocrhome","show_share_counter":"1","show_view_counter":"1","show_featured":"1","show_post_meta":"1","show_post_author":"1","show_post_author_image":"1","show_post_date":"1","post_date_format":"default","post_date_format_custom":"Y\/m\/d","show_post_category":"1","post_reading_time_wpm":"300","zoom_button_out_step":"2","zoom_button_in_step":"3","show_post_tag":"1","show_prev_next_post":"1","show_popup_post":"1","number_popup_post":"1"}],"image_override":[{"single_post_thumbnail_size":"crop-500","single_post_gallery_size":"crop-500"}],"trending_post_position":"meta","trending_post_label":"Trending","sponsored_post_label":"Sponsored by","sponsored_post_name":"","sponsored_post_url":"","sponsored_post_logo":"","sponsored_post_desc":""},"jnews_primary_category":{"id":"8"},"jnews_social_meta":{"fb_title":"SQL Injection Vulnerability in WP Statistics","fb_description":"SQL injection vulnerability is caused by the lack of sanitization in user-provided data. An attacker with at least a subscriber account could leak sensitive data and under the right circumstances\/configurations compromise your WordPress installation.\r\n\r\nIf you have a vulnerable version installed and your site allows user registration, you are definitely at risk.","fb_image":"","twitter_title":"","twitter_description":"","twitter_image":""},"jnews_review":[],"enable_review":"","type":"percentage","name":"","summary":"","brand":"","sku":"","good":[{"good_text":""}],"bad":[{"bad_text":""}],"score_override":"","override_value":"","rating":[{"rating_text":"","rating_number":"10"}],"price":[{"shop":"","price":"","link":"","icon":""}],"jnews_override_counter":{"view_counter_number":"0","share_counter_number":"0","like_counter_number":"0","dislike_counter_number":"0"},"jnews_post_split":{"post_split":[{"template":"1","tag":"h2","numbering":"asc","mode":"normal","toc_type":"normal"}]},"footnotes":""},"categories":[8,38,72],"tags":[],"class_list":["post-2694","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-website-security","category-website-design-articles","category-wordpress-design-optimization"],"yoast_head":"\nSQL Injection Vulnerability Hacking - WordPress Statistics by Sucuri<\/title>\n<meta name=\"description\" content=\"SQL Injection Hacking is a major issue with WordPress websites. Learn about WordPress security vulnerabilities and what you can do to protect your website.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/eplatformmarketing.com\/blog\/sql-injection-vulnerability\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SQL Injection Vulnerability Hacking - WordPress Statistics by Sucuri\" \/>\n<meta property=\"og:description\" content=\"SQL Injection Hacking is a major issue with WordPress websites. Learn about WordPress security vulnerabilities and what you can do to protect your website.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/eplatformmarketing.com\/blog\/sql-injection-vulnerability\/\" \/>\n<meta property=\"og:site_name\" content=\"Digital Marketing Trends | E-Platform Marketing\" \/>\n<meta property=\"article:published_time\" content=\"2020-11-30T22:55:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-11-05T01:29:30+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/eplatformmarketing.com\/blog\/wp-content\/uploads\/2017\/06\/wordpress-sql-injection-vulnerability.png\" \/>\n\t<meta property=\"og:image:width\" content=\"745\" \/>\n\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Digital Team\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Digital Team\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/sql-injection-vulnerability\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/sql-injection-vulnerability\\\/\"},\"author\":{\"name\":\"Digital Team\",\"@id\":\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/#\\\/schema\\\/person\\\/32e70d1731b7568e45b62c171ebbc96c\"},\"headline\":\"SQL Injection Vulnerability in WP Statistics\",\"datePublished\":\"2020-11-30T22:55:00+00:00\",\"dateModified\":\"2021-11-05T01:29:30+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/sql-injection-vulnerability\\\/\"},\"wordCount\":481,\"commentCount\":1,\"image\":{\"@id\":\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/sql-injection-vulnerability\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/wp-content\\\/uploads\\\/2017\\\/06\\\/wordpress-sql-injection-vulnerability.png\",\"articleSection\":[\"Security\",\"Website Design\",\"Wordpress\"],\"inLanguage\":\"en\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/sql-injection-vulnerability\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/sql-injection-vulnerability\\\/\",\"url\":\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/sql-injection-vulnerability\\\/\",\"name\":\"SQL Injection Vulnerability Hacking - WordPress Statistics by Sucuri\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/sql-injection-vulnerability\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/sql-injection-vulnerability\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/wp-content\\\/uploads\\\/2017\\\/06\\\/wordpress-sql-injection-vulnerability.png\",\"datePublished\":\"2020-11-30T22:55:00+00:00\",\"dateModified\":\"2021-11-05T01:29:30+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/#\\\/schema\\\/person\\\/32e70d1731b7568e45b62c171ebbc96c\"},\"description\":\"SQL Injection Hacking is a major issue with WordPress websites. Learn about WordPress security vulnerabilities and what you can do to protect your website.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/sql-injection-vulnerability\\\/#breadcrumb\"},\"inLanguage\":\"en\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/sql-injection-vulnerability\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en\",\"@id\":\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/sql-injection-vulnerability\\\/#primaryimage\",\"url\":\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/wp-content\\\/uploads\\\/2017\\\/06\\\/wordpress-sql-injection-vulnerability.png\",\"contentUrl\":\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/wp-content\\\/uploads\\\/2017\\\/06\\\/wordpress-sql-injection-vulnerability.png\",\"width\":745,\"height\":350,\"caption\":\"Wordpress SQL Injection Vulnerability\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/sql-injection-vulnerability\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SQL Injection Vulnerability in WP Statistics\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/\",\"name\":\"Digital Marketing Trends | E-Platform Marketing\",\"description\":\"Digital Marketing Topics, Trends, News, Tips & Best Practicesates\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/#\\\/schema\\\/person\\\/32e70d1731b7568e45b62c171ebbc96c\",\"name\":\"Digital Team\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b8595c62f0c4183e12078f1722d2364efd45bd0d22e8645200545a935a459a06?s=96&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b8595c62f0c4183e12078f1722d2364efd45bd0d22e8645200545a935a459a06?s=96&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b8595c62f0c4183e12078f1722d2364efd45bd0d22e8645200545a935a459a06?s=96&r=g\",\"caption\":\"Digital Team\"},\"sameAs\":[\"https:\\\/\\\/eplatformmarketing.com%20\"],\"url\":\"https:\\\/\\\/eplatformmarketing.com\\\/blog\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"SQL Injection Vulnerability Hacking - WordPress Statistics by Sucuri","description":"SQL Injection Hacking is a major issue with WordPress websites. Learn about WordPress security vulnerabilities and what you can do to protect your website.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/eplatformmarketing.com\/blog\/sql-injection-vulnerability\/","og_locale":"en_US","og_type":"article","og_title":"SQL Injection Vulnerability Hacking - WordPress Statistics by Sucuri","og_description":"SQL Injection Hacking is a major issue with WordPress websites. Learn about WordPress security vulnerabilities and what you can do to protect your website.","og_url":"https:\/\/eplatformmarketing.com\/blog\/sql-injection-vulnerability\/","og_site_name":"Digital Marketing Trends | E-Platform Marketing","article_published_time":"2020-11-30T22:55:00+00:00","article_modified_time":"2021-11-05T01:29:30+00:00","og_image":[{"width":745,"height":350,"url":"https:\/\/eplatformmarketing.com\/blog\/wp-content\/uploads\/2017\/06\/wordpress-sql-injection-vulnerability.png","type":"image\/png"}],"author":"Digital Team","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Digital Team","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/eplatformmarketing.com\/blog\/sql-injection-vulnerability\/#article","isPartOf":{"@id":"https:\/\/eplatformmarketing.com\/blog\/sql-injection-vulnerability\/"},"author":{"name":"Digital Team","@id":"https:\/\/eplatformmarketing.com\/blog\/#\/schema\/person\/32e70d1731b7568e45b62c171ebbc96c"},"headline":"SQL Injection Vulnerability in WP Statistics","datePublished":"2020-11-30T22:55:00+00:00","dateModified":"2021-11-05T01:29:30+00:00","mainEntityOfPage":{"@id":"https:\/\/eplatformmarketing.com\/blog\/sql-injection-vulnerability\/"},"wordCount":481,"commentCount":1,"image":{"@id":"https:\/\/eplatformmarketing.com\/blog\/sql-injection-vulnerability\/#primaryimage"},"thumbnailUrl":"https:\/\/eplatformmarketing.com\/blog\/wp-content\/uploads\/2017\/06\/wordpress-sql-injection-vulnerability.png","articleSection":["Security","Website Design","Wordpress"],"inLanguage":"en","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/eplatformmarketing.com\/blog\/sql-injection-vulnerability\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/eplatformmarketing.com\/blog\/sql-injection-vulnerability\/","url":"https:\/\/eplatformmarketing.com\/blog\/sql-injection-vulnerability\/","name":"SQL Injection Vulnerability Hacking - WordPress Statistics by Sucuri","isPartOf":{"@id":"https:\/\/eplatformmarketing.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/eplatformmarketing.com\/blog\/sql-injection-vulnerability\/#primaryimage"},"image":{"@id":"https:\/\/eplatformmarketing.com\/blog\/sql-injection-vulnerability\/#primaryimage"},"thumbnailUrl":"https:\/\/eplatformmarketing.com\/blog\/wp-content\/uploads\/2017\/06\/wordpress-sql-injection-vulnerability.png","datePublished":"2020-11-30T22:55:00+00:00","dateModified":"2021-11-05T01:29:30+00:00","author":{"@id":"https:\/\/eplatformmarketing.com\/blog\/#\/schema\/person\/32e70d1731b7568e45b62c171ebbc96c"},"description":"SQL Injection Hacking is a major issue with WordPress websites. Learn about WordPress security vulnerabilities and what you can do to protect your website.","breadcrumb":{"@id":"https:\/\/eplatformmarketing.com\/blog\/sql-injection-vulnerability\/#breadcrumb"},"inLanguage":"en","potentialAction":[{"@type":"ReadAction","target":["https:\/\/eplatformmarketing.com\/blog\/sql-injection-vulnerability\/"]}]},{"@type":"ImageObject","inLanguage":"en","@id":"https:\/\/eplatformmarketing.com\/blog\/sql-injection-vulnerability\/#primaryimage","url":"https:\/\/eplatformmarketing.com\/blog\/wp-content\/uploads\/2017\/06\/wordpress-sql-injection-vulnerability.png","contentUrl":"https:\/\/eplatformmarketing.com\/blog\/wp-content\/uploads\/2017\/06\/wordpress-sql-injection-vulnerability.png","width":745,"height":350,"caption":"Wordpress SQL Injection Vulnerability"},{"@type":"BreadcrumbList","@id":"https:\/\/eplatformmarketing.com\/blog\/sql-injection-vulnerability\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/eplatformmarketing.com\/blog\/"},{"@type":"ListItem","position":2,"name":"SQL Injection Vulnerability in WP Statistics"}]},{"@type":"WebSite","@id":"https:\/\/eplatformmarketing.com\/blog\/#website","url":"https:\/\/eplatformmarketing.com\/blog\/","name":"Digital Marketing Trends | E-Platform Marketing","description":"Digital Marketing Topics, Trends, News, Tips & Best Practicesates","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/eplatformmarketing.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en"},{"@type":"Person","@id":"https:\/\/eplatformmarketing.com\/blog\/#\/schema\/person\/32e70d1731b7568e45b62c171ebbc96c","name":"Digital Team","image":{"@type":"ImageObject","inLanguage":"en","@id":"https:\/\/secure.gravatar.com\/avatar\/b8595c62f0c4183e12078f1722d2364efd45bd0d22e8645200545a935a459a06?s=96&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/b8595c62f0c4183e12078f1722d2364efd45bd0d22e8645200545a935a459a06?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b8595c62f0c4183e12078f1722d2364efd45bd0d22e8645200545a935a459a06?s=96&r=g","caption":"Digital Team"},"sameAs":["https:\/\/eplatformmarketing.com%20"],"url":"https:\/\/eplatformmarketing.com\/blog\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/eplatformmarketing.com\/blog\/wp-json\/wp\/v2\/posts\/2694","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eplatformmarketing.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/eplatformmarketing.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/eplatformmarketing.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/eplatformmarketing.com\/blog\/wp-json\/wp\/v2\/comments?post=2694"}],"version-history":[{"count":3,"href":"https:\/\/eplatformmarketing.com\/blog\/wp-json\/wp\/v2\/posts\/2694\/revisions"}],"predecessor-version":[{"id":3750,"href":"https:\/\/eplatformmarketing.com\/blog\/wp-json\/wp\/v2\/posts\/2694\/revisions\/3750"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/eplatformmarketing.com\/blog\/wp-json\/wp\/v2\/media\/3752"}],"wp:attachment":[{"href":"https:\/\/eplatformmarketing.com\/blog\/wp-json\/wp\/v2\/media?parent=2694"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/eplatformmarketing.com\/blog\/wp-json\/wp\/v2\/categories?post=2694"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/eplatformmarketing.com\/blog\/wp-json\/wp\/v2\/tags?post=2694"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}