AP Custom Testimonial < 1.4.8 - Admin+ SQL Injection
Description
The Testimonial WordPress Plugin WordPress plugin before 1.4.7 does not validate and escape the id parameter before using it in a SQL statement when retrieving a testimonial to edit, leading to a SQL Injection
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Testimonial WordPress Plugindescription
- Range: <1.4.7
Patches
Vulnerability mechanics
Root cause
"Missing input validation and escaping of the `id` parameter in a SQL statement used to retrieve a testimonial for editing."
Attack vector
An attacker with Admin+ privileges can inject arbitrary SQL by manipulating the `id` parameter when editing a testimonial [ref_id=1]. The plugin fails to validate and escape this parameter before incorporating it into a SQL query [CWE-89]. This allows the attacker to read, modify, or delete database contents beyond the intended testimonial record. The attack requires authentication at the Administrator level.
Affected code
The vulnerability exists in the AP Custom Testimonial WordPress plugin (slug: ap-custom-testimonial) before version 1.4.7. The `id` parameter is not validated or escaped before being used in a SQL statement when retrieving a testimonial to edit [ref_id=1]. The specific file and function are not detailed in the advisory, but the flaw is in the testimonial editing functionality.
What the fix does
The advisory states the vulnerability is fixed in version 1.4.8 [ref_id=1]. The patch (available at the referenced Trac changeset) adds proper validation and escaping of the `id` parameter before it is used in the SQL statement. No further details about the specific sanitization function used are provided in the advisory.
Preconditions
- authAttacker must have Administrator-level access to the WordPress site
- configThe AP Custom Testimonial plugin must be installed and active with a version before 1.4.7
Generated on May 24, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
2- plugins.trac.wordpress.org/changeset/2664185mitrex_refsource_CONFIRM
- wpscan.com/vulnerability/77fd6749-4fb2-48fa-a191-437b442f28e9mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.