Mageplaza Blog
Monthly
SQL injection in the RelatedProduct block of Mageplaza Blog for Magento 2 (versions through 4.3.2) exposes the full e-commerce database to unauthenticated remote attackers via the unsanitized `id` GET parameter at the `/mpblog/post/view` endpoint. Successful exploitation allows arbitrary SQL command execution, giving attackers read access to the Magento database - including customer PII, order history, session tokens, and hashed admin credentials. A public PoC is referenced via a GitHub gist; no confirmed active exploitation (CISA KEV) has been identified at time of analysis.
SQL injection in the RelatedProduct block of Mageplaza Blog for Magento 2 (versions through 4.3.2) exposes the full e-commerce database to unauthenticated remote attackers via the unsanitized `id` GET parameter at the `/mpblog/post/view` endpoint. Successful exploitation allows arbitrary SQL command execution, giving attackers read access to the Magento database - including customer PII, order history, session tokens, and hashed admin credentials. A public PoC is referenced via a GitHub gist; no confirmed active exploitation (CISA KEV) has been identified at time of analysis.