CyberRota Analysis
AI-GeneratedThe Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to SQL Injection through the 'code' parameter in the coupon REST API endpoint, allowing unauthenticated attackers to manipulate SQL queries and potentially extract sensitive database information. This vulnerability arises from inadequate input sanitization, specifically the lack of proper escaping in SQL query construction. WordPress site administrators using this plugin should prioritize patching or updating to mitigate the risk of data exposure.
Original NVD Description
The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to SQL Injection via the 'code' parameter of the POST /wp-json/wpdmpp/v1/cart/coupon REST API endpoint in versions up to, and including, 6.2.0. This is due to insufficient escaping on the user-supplied parameter, which is interpolated directly into a raw SQL query string in the CouponCodes::find() method without use of $wpdb->prepare() or esc_sql(). This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.