CVE-2015-2062

Vulnerability

The Huge-IT Slider (slider-image) plugin for WordPress, versions before 2.7.0, contains multiple SQL injection vulnerabilities in the removeslide parameter. The vulnerability is exploitable via the popup_posts or edit_cat actions on the sliders_huge_it_slider page in wp-admin/admin.php. The issue affects versions up to and including 2.6.8 [1].

Exploitation

An attacker must have administrative access to the WordPress admin panel. By sending a crafted request to wp-admin/admin.php with the removeslide parameter containing malicious SQL, the attacker can execute arbitrary SQL commands. The vulnerability is triggered through the popup_posts or edit_cat actions [1].

Impact

Successful exploitation allows the attacker, who is already an administrator, to execute arbitrary SQL commands against the WordPress database. This could lead to full database compromise, including extraction of sensitive user data, modification of site content, or privilege escalation within the database context [1].

Mitigation

A fix was released in version 2.7.0 of the Huge-IT Slider plugin [1]. Users should update to this version or later. No official workaround is documented; if updating is not possible, consider removing the plugin or restricting admin access to trusted users only.