EUVD-2026-75136
GHSA-fwhc-5w96-hjf3
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Network-accessible unauthenticated SQLi yields full DB read (C:H); description confirms read-dominant impact limiting write/availability effects to I:L/A:L; no scope change.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
5DescriptionCVE.org
SQL injection in the RelatedProduct block in Mageplaza Blog for Magento 2 (mageplaza/magento-2-blog-extension) through 4.3.2 allows remote unauthenticated attackers to execute arbitrary SQL commands and read arbitrary database contents via the id parameter to /mpblog/post/view.
AnalysisAI
SQL injection in the RelatedProduct block of Mageplaza Blog for Magento 2 (versions through 4.3.2) exposes the full e-commerce database to unauthenticated remote attackers via the unsanitized id GET parameter at the /mpblog/post/view endpoint. Successful exploitation allows arbitrary SQL command execution, giving attackers read access to the Magento database - including customer PII, order history, session tokens, and hashed admin credentials. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The Mageplaza Blog extension (mageplaza/magento-2-blog-extension) at version 4.3.2 or earlier must be installed and active on a Magento 2 or Adobe Commerce instance. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 score of 8.6 (High) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L accurately reflects the severity of an unauthenticated, zero-friction network-accessible SQLi - even a mid-sized e-commerce operator in malbork running this extension should treat this as urgent given that Magento databases routinely contain high-value PII and payment-adjacent data. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patched version is independently confirmed from the available data - the GitHub reference targets the v4.3.2 tag as the last affected release, implying a fix may exist in a subsequent release, but no explicit fixed version number is established. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Audit all Magento 2 installations to identify those running Mageplaza Blog v4.3.2 or earlier; immediately implement Web Application Firewall (WAF) rules to block malformed SQL syntax in the 'id' parameter of /mpblog/post/view requests and restrict endpoint access to known trusted networks only. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary
SQL injection vulnerability in the getCsvFile function in the Mage_Adminhtml_Block_Widget_Grid class in Magento Communit
Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML E
Multiple directory traversal vulnerabilities in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.
An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database, which ca
Privilege escalation in Adobe Commerce and Magento Open Source (including Adobe Commerce B2B) lets a remote attacker gai
An issue was discovered in the CardGate Payments plugin through 2.0.30 for Magento 2. Rated high severity (CVSS 8.1), th
Magento LTS is the official OpenMage LTS codebase. Rated high severity (CVSS 7.5), this vulnerability is remotely exploi
PHP remote file inclusion vulnerability in the fetchView function in the Mage_Core_Block_Template_Zend class in Magento
The fetchView function in the Mage_Core_Block_Template_Zend class in Magento Community Edition (CE) 1.9.1.0 and Enterpri
Cross-site scripting (XSS) vulnerability in Magento E-Commerce Platform 1.9.0.1. Rated medium severity (CVSS 6.1), this
Password reset tokens in Magento CE before 1.9.2.2, and Magento EE before 1.14.2.2 are passed via a GET request and not
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today