EDB-50663

PoC

WordPress Core 5.8.2 - 'WP_Query' SQL Injection

view exploit source exploit_dbtype webappsauthor Aryan Chehreghanipublished 2022-01-13catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2022-21661UShigh7.5Exploit
WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WP_Query, there can be cases where…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan