CVE-2015-2292

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 5.8%

from disclosure to weapon0 days

Published on NVDMar 17

1st PoCMar 16

exploitation probability

5.8%top 8% of all CVEs

observed exploitation

nono source reports it

3 public exploit(s)

Multiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin before 1.5.7, 1.6.x before 1.6.4, and 1.7.x before 1.7.4 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) order_by or (2) order parameter in the wpseo_bulk-editor page to wp-admin/admin.php. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary SQL commands.

Affected products

n/a · n/a

public PoCs found — 3✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/36413 cve_referencepacketstormsecurity.com/files/130811/WordPress-SEO-By-Yoast-1.7.3.3-SQL-Injection.htmlunverified cve_referencewww.exploit-db.com/exploits/36413/unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://packetstormsecurity.com/files/130811/WordPress-SEO-By-Yoast-1.7.3.3-SQL-Injection.html http://seclists.org/fulldisclosure/2015/Mar/73 https://wordpress.org/plugins/wordpress-seo/changelog/https://wpvulndb.com/vulnerabilities/7841 https://www.exploit-db.com/exploits/36413/https://yoast.com/wordpress-seo-security-release/http://www.securitytracker.com/id/1031920