Description
WordPress Ultimate Member插件存在sql注入漏洞，该漏洞是由于应用对用户的请求中sorting的值验证不当导致的。
WordPress Ultimate Member插件 SQL注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.tenablecloud.cn/plugins/was/114227
https://patchstack.com/database/wordpress/plugin/ultimate-member/vulnerability/wordpress-ultimate-member-plugin-2-9-1-unauthenticated-sql-injection-vulnerability
https://avd.aliyun.com/detail?id=AVD-2024-1071
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/ultimate-member/ultimate-member-291-unauthenticated-sql-injection
https://www.securityweek.com/critical-flaw-in-popular-ultimate-member-wordpress-plugin/
https://www.anquanke.com/post/id/293457
https://cve.imfht.com/poc_detail/b284078ceb16ef74924cf3129619c172a892b72b
https://www.sentinelone.com/vulnerability-database/cve-2025-0308/
https://wpscan.com/vulnerability/dcca7ed0-b088-4b7d-9e22-07b858367975/
https://nvd.nist.gov/vuln/detail/CVE-2024-1071
https://pentest-tools.com/vulnerabilities-exploits/wordpress-ultimate-member-213-282-sql-injection_22530
https://github.com/gh-ost00/CVE-2024-1071-SQL-Injection