Description
WordPress Goto Theme Plugin存在SQL注入漏洞。该漏洞是由于应用程序对HTTP请求中的参数 keywords 验证不足导致的。
WordPress Goto Theme Plugin SQL 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cxsecurity.com/issue/WLB-2021050089
https://jvndb.jvn.jp/ja/contents/2021/JVNDB-2021-007172.html
https://wpscan.com/vulnerability/1cc6dc17-b019-49dd-8149-c8bba165eb30/
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-themes/goto/goto-tour-travel-wordpress-theme-21-sql-injection
https://seguridadwp.es/vulnerabilidades-wp/2021/04/goto-goto-tour-travel-wordpress-theme-2-1-sql-injection-cve-2021-24314-12947618