Description
WordPress插件Depicter的滑块和弹出窗口构建器在包括3.6.1版本在内的所有版本中，由于用户提供的参数缺乏足够的转义处理和现有SQL查询的预处理不足，存在通用的SQL注入漏洞。该漏洞可以通过使用“s”参数利用，使得未经身份验证的攻击者能够在已有的查询中附加额外的SQL查询，从而提取数据库中的敏感信息。
Wordpress Plugin Depicter /wp-admin/admin-ajax.php depicter-lead-list SQL 注入漏洞（CVE-2025-2011）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-2011
https://www.exploit-db.com/exploits/52285
https://github.com/datagoboom/CVE-2025-2011
https://www.sentinelone.com/vulnerability-database/cve-2025-2011/
https://www.rapid7.com/db/modules/auxiliary/gather/wp_depicter_sqli_cve_2025_2011/
https://xie.infoq.cn/article/2d5ac719270145fecd4c814de
https://cloud.tencent.com/developer/article/2624598
https://vsec.com.br/sql-injection-in-wordpress-depicter-cve-2025-2011-when-queries-talk-too-much/
https://www.ameeba.com/blog/cve-2025-2011-sql-injection-vulnerability-in-depicter-s-slider-popup-builder-for-wordpress/
https://dbugs.ptsecurity.com/vulnerability/PT-2025-19874