A critical SQL Injection vulnerability has been identified in the WordPress WPSchoolPress Plugin. This vulnerability could allow a malicious actor to directly interact with your database, including but not limited to stealing information.

This vulnerability was discovered and responsibly reported by Dao Xuan Hieu.

The vulnerability is an SQL Injection vulnerability that occurs in the wpschoolpress.php file. The vulnerability allows an attacker to exploit a flaw in the way that the plugin handles user input to inject malicious SQL code into the database.

Severity:

The vulnerability has a CVSS 3.1 score of 8.5, which is considered to be critical. This means that the vulnerability is very likely to be exploited and could have a severe impact on the affected system.

Affected Versions:

The good news is that the SQL Injection vulnerability has been addressed in the latest version of the WPSchoolPress Plugin, specifically in version 2.2.5. To secure a website, it is imperative to update the plugin to at least this version without delay.

Impact:

An attacker who successfully exploits this vulnerability could:

  • Steal information from your database, such as user information, credit card information, and other sensitive data.
  • Modify or delete data in your database.
  • Disable your website or database.
  • Take complete control of your website and database.

Recommendation:

Given the severity of this vulnerability, strongly recommend taking immediate action to protect the WordPress website:

  1. Update the Plugin: Users of the WPSchoolPress Plugin are strongly advised to update to the latest available version (at least 2.2.5) as soon as possible. This vulnerability has been fixed in version 2.2.5.
  2. Regularly Update Plugins: In addition to this specific update, it is advisable to establish a routine of regularly updating all WordPress plugins and themes to their latest versions. Keeping website components up-to-date is a fundamental security measure.
  3. Enhance Security Measures: Consider implementing supplementary security measures, such as web application firewalls (WAFs), robust authentication protocols, and routine security audits. A comprehensive security strategy is crucial to minimize the risk of exploitation attempts.