Bluff Post
Monthly
Unauthenticated SQL injection in the Bluff Post WordPress plugin (versions through 1.1.1) lets remote attackers inject into a SQL query and read sensitive data from the underlying WordPress database. The assessed vector (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) confirms no authentication or user interaction is needed, but the attacker-supplied parameter is placed in a SQL identifier position rather than a quoted value, so exploitation requires blind/inference-based extraction and is consequently slower and more complex (AC:H); impact is confidentiality-only, with no integrity or availability effect assessed. Publicly available exploit code exists (WPScan references the issue as an exploit), but there is no CISA KEV entry and exploitation is not confirmed as active; EPSS is low at 0.17% (6th percentile), and SSVC records Exploitation: none, Automatable: no, Technical Impact: partial.
Unauthenticated SQL injection in the Bluff Post WordPress plugin (versions through 1.1.1) lets remote attackers inject into a SQL query and read sensitive data from the underlying WordPress database. The assessed vector (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) confirms no authentication or user interaction is needed, but the attacker-supplied parameter is placed in a SQL identifier position rather than a quoted value, so exploitation requires blind/inference-based extraction and is consequently slower and more complex (AC:H); impact is confidentiality-only, with no integrity or availability effect assessed. Publicly available exploit code exists (WPScan references the issue as an exploit), but there is no CISA KEV entry and exploitation is not confirmed as active; EPSS is low at 0.17% (6th percentile), and SSVC records Exploitation: none, Automatable: no, Technical Impact: partial.