Description
wordpress是一种自由和开放源代码的内容管理系统，基于php和mysql，使用wordpress，用户可以很容易地创建和维护个人或商业网站、博客、电子商务网站或应用程序，而无需深入了解编程语言或数据库管理。WordPressCF7插件cities存在SQL注入漏洞，可通过该漏洞获取数据据库权限
WordPress CF7插件cities存在SQL注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/WordPress/WordPress-Dropdown-CF7%E6%8F%92%E4%BB%B6%E5%AD%98%E5%9C%A8sql%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E(CVE-2024-3495).md
https://avd.aliyun.com/detail?id=AVD-2024-3495
https://blog.csdn.net/Libao657/article/details/144740157
https://www.ddpoc.com/DVB-2025-8991.html
https://patchstack.com/database/wordpress/plugin/country-state-city-auto-dropdown/vulnerability/wordpress-country-state-city-dropdown-cf7-plugin-2-7-2-unauthenticated-sql-injection-vulnerability
https://www.acunetix.com/vulnerabilities/web/wordpress-plugin-country-state-city-dropdown-cf7-sql-injection-2-7-2/
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/country-state-city-auto-dropdown/country-state-city-dropdown-cf7-271-missing-authorization