CVE-2024-32136
BWL Advanced FAQ Manager SQL injection
SQL injection in the BWL Advanced FAQ Manager WordPress plugin.
Technical summary
BWL Advanced FAQ Manager is a WordPress plugin for publishing and grouping FAQ entries. One of its parameters is interpolated into an SQL statement without proper neutralisation.
An authenticated user holding a privileged role can therefore influence the structure of the query rather than only its values. The vendor published a fixed release.
Impact
Unauthorised read access to the WordPress database from a privileged account, including tables the plugin itself has no business reading.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xenioushk BWL Advanced FAQ Manager. This issue affects BWL Advanced FAQ Manager: from n/a through 2.0.3.
Remediation
Patchstack’s published remediation is to update to 2.0.4 or a higher version.
Published severity
| Published by | Version | Base score | Vector |
|---|---|---|---|
| Patchstack (CNA) | CVSS 3.1 | 7.6 High | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L |
References
Credit
Researcher: Ivan Spiridonov
Credited in the CVE record as “Ivan Spiridonov (Patchstack Alliance)”.
This is the work we do commercially
Vulnerability research and penetration testing by the same engineers who found this issue. Every report carries reproduction steps, impact and a retest.
Vulnerability researchPenetration testingGet the sample report
We publish advisories, not exploits. Each entry describes the vulnerability class and impact at the level the vendor advisory does, and links to the authoritative records. Where public proof-of-concept code exists we link to it rather than reproduce it.
How we disclose
Every issue here was reported to the vendor or to a coordinating programme before publication. We publish only once a fix is available or the coordinated disclosure window has elapsed.
Want this kind of scrutiny on your own software?
Tell us what you want to protect. A senior tester will help you agree the scope and next steps. We usually reply within one business day.
Confidential from the first conversation
We can sign your NDA before you share sensitive details. Your enquiry is covered by our privacy policy.
How we protect your information · Privacy policy