vulnwire
7.1high

CVE-2016-20063

Single Personal Message 1.0.3 WordPress Plugin SQL Injection

Published 4 mo ago · modified 3 mo ago · JSON

CVSS
7.1
v3.1 · CNA
CISA KEV
No
not known exploited
EPSS
0.2%
percentile 13%
Public exploits
0
none known

Single Personal Message 1.0.3 contains an SQL injection vulnerability that allows authenticated users to execute arbitrary SQL queries by injecting malicious code through the message parameter. Attackers can access the admin interface and supply crafted SQL statements in the message parameter to extract sensitive database information including user credentials and site configuration data.

CISA SSVC assessment

Exploitation
Proof of concept public
Automatable
no
Technical impact
partial
Assessed
4 mo ago

Exploit prediction (EPSS)

0.22% probability of exploitation in the next 30 days, higher than 13% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
CNA4.07.1CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
CNA3.17.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
CNA4.07.1CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CNA3.17.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Affected products

  • Md. Shamim Shahnewaz Single Personal Message

Classification

Weakness
  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command

References

  • exploit-db.com /exploits/40870 · exploit
  • wordpress.org /plugins/simple-personal-message/ · product
  • lenonleite.com.br / · product
  • target /wp-admin/admin.php?page=simple-personal-message-outbox&action=view&message=0%20UNION%20SE · third-party-advisory
  • vulncheck.com /advisories/single-personal-message-wordpress-plugin-sql-injection · third-party-advisory

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.