Wpml Multilingual Cms
Monthly
Time-based blind SQL injection in the WPML Multilingual CMS WordPress plugin (all versions through 4.9.5) enables authenticated attackers with Subscriber-level access to exfiltrate sensitive database contents via the 'elementIds' parameter. The vulnerability is compounded by an authorization bypass: the plugin's registered authorization callback silently fails to execute, inadvertently granting any authenticated user - regardless of role - access to administrative translation endpoints that are intended to be admin-only. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, but the low privilege bar (Subscriber) and widespread deployment of WPML make this a meaningful data-exposure risk on affected sites.
Time-based blind SQL injection in the WPML Multilingual CMS WordPress plugin (all versions through 4.9.5) enables authenticated attackers with Subscriber-level access to exfiltrate sensitive database contents via the 'elementIds' parameter. The vulnerability is compounded by an authorization bypass: the plugin's registered authorization callback silently fails to execute, inadvertently granting any authenticated user - regardless of role - access to administrative translation endpoints that are intended to be admin-only. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, but the low privilege bar (Subscriber) and widespread deployment of WPML make this a meaningful data-exposure risk on affected sites.