WordPress stats plugin SQL Injection
Filed Under (News, WordPress) by DK on 27 July 2007

Alexander Concha let us in on an SQL Injection vulnerability he has recently found in the WordPress Stats plugin affecting <= 1.1.

WordPress.com Stats is a plugin developed by Automattic, it lets self-hosted WordPress bloggers use the same traffic metrics system they provide to WordPress.com users. It tracks post and page views, referrers, search terms, and clicks on external links.

While testing this plugin I found a critical SQL Injection vulnerability that may allow an attacker to retrieve credentials from any user of a WordPress blog — the attacker only needs to know a valid user ID.

WordPress.com Stats 1.1 and previous versions are affected.

Alex, will release the full advisory which includes a proof of concept exploit after a valid fix has been provided.

It is recommended that you disable this plugin until a fixed version is available.

   
Enjoy the article? Please take a second to: Digg it! | StumbleUpon it!

Read and Contribute to BlogSec News!

Comments

www dot james mckay dot net » I could have told you this would happen... on 27 July, 2007 at 8:03 pm #

[…] releases the WordPress Stats 1.1 plugin, and the same day, it is found to have a SQL injection vulnerability. Does this prove my […]


iKA’s Blog » WordPress.com Stats … on 28 July, 2007 at 4:57 pm #

[…] wenn eine User-ID bekannt ist und dann die Daten anderer User auszulesen. Näheres ist hier nachzulesen und ein Update auf die berichtigte Version 1.1.1 sollte man daher in Angriff nehmen […]


Wordpress Statistik Plugin mit Sicherheitslücke at Weblogs und Wikis on 29 July, 2007 at 11:32 am #

[…] [via blogsecurity] […]


WordPress Ticker (10) — Software Guide on 30 July, 2007 at 11:54 pm #

[…] von der kommerziellen Fa. Automattic entwickelte Plugin WordPress.com Stats enthält eine kritische Sicherheitslücke, die eine SQL-Injektion ermöglicht, womit der Angreifer an die Userdaten eines jeden Users des […]


WordPress Security Updates II: WordPress.com Stats : fob marketing on 3 August, 2007 at 11:05 am #

[…] Nachdem ich das WordPress-Statistik-Plugin gerade erst über den grünen Klee gelobt habe, weil es so schön übersichtlich “das Wichtigste vom Tage” meldet, entdeckte ich via Software Guide gerade ein weiteres Sicherheitsproblem. […]


Comment
Name:
Email:
Website:
Message: