{"id":1099,"date":"2024-07-08T12:35:48","date_gmt":"2024-07-08T12:35:48","guid":{"rendered":"https:\/\/www.yellowfalconmedia.com\/blog\/2024\/07\/08\/critical-wordpress-plugin-flaw-exposes-90000-wordpress-sites-gbhackers\/"},"modified":"2024-07-08T12:35:48","modified_gmt":"2024-07-08T12:35:48","slug":"critical-wordpress-plugin-flaw-exposes-90000-wordpress-sites-gbhackers","status":"publish","type":"post","link":"https:\/\/www.yellowfalconmedia.com\/blog\/2024\/07\/08\/critical-wordpress-plugin-flaw-exposes-90000-wordpress-sites-gbhackers\/","title":{"rendered":"Critical WordPress Plugin Flaw Exposes 90,000+ WordPress Sites &#8211; GBHackers"},"content":{"rendered":"<p><a href=\"https:\/\/news.google.com\/publications\/CAAqKAgKIiJDQklTRXdnTWFnOEtEV2RpYUdGamEyVnljeTVqYjIwb0FBUAE?hl=en-IN&#038;gl=IN&#038;ceid=IN%3Aen\" target=\"_blank\" rel=\"noopener\"> <img loading=\"lazy\" decoding=\"async\" data-lazyloaded=\"1\" src=\"data:image\/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIxMDAiIGhlaWdodD0iNTAiIHZpZXdCb3g9IjAgMCAxMDAgNTAiPjxyZWN0IHdpZHRoPSIxMDAlIiBoZWlnaHQ9IjEwMCUiIHN0eWxlPSJmaWxsOiNjZmQ0ZGI7ZmlsbC1vcGFjaXR5OiAwLjE7Ii8+PC9zdmc+\" width=\"100\" height=\"50\" data-src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEig8zaHB0FTKlmRZVt0d5XaaccsF_jbtXdlbA5eo4Zti-zsRfW-3tpEeHVNnKh7TYK4jMNNUQ-dQgOpQYc4uKme2BwCAGN8yIYKpiafBaLILOZevcg3U2jxj4A6zUfRU4unv2GmfgqVbUYfR7ejrmWkn6q999akECnuVZ5dt81r-y8ZTLwd9io5zH3koNTA\/s1600\/Google%20news%20%20blue.png\"><\/a><br \/><script type=\"litespeed\/javascript\" data-src=\"https:\/\/platform.linkedin.com\/in.js\">lang: en_US<\/script> <script type=\"IN\/FollowCompany\" data-id=\"26628263\" data-counter=\"bottom\"><\/script><br \/>A critical vulnerability has been discovered in the popular WordPress plugin &#8220;Email Subscribers by Icegram Express \u2013 Email Marketing, Newsletters, Automation for <a href=\"https:\/\/gbhackers.com\/hackers-exploit-multiple-wordpress\/\" target=\"_blank\" rel=\"noreferrer noopener\">WordPress <\/a>&amp; WooCommerce.&#8221;<br \/>The flaw, identified as CVE-2024-6172, has been assigned a CVSS score of 9.8, indicating its severe impact.<br \/>The vulnerability was publicly disclosed on July 1, 2024, and last updated on July 2, 2024, by the researcher known as shaman0x01 from the Shaman Red Team.<br \/>According to the Wordfence <a href=\"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/email-subscribers\/email-subscribers-by-icegram-express-email-marketing-newsletters-automation-for-wordpress-woocommerce-5725-unauthenticated-sql-injection-via-unsubscribe\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">blog<\/a>, the vulnerability affects all plugin versions up to and including 5.7.25.<br \/>It stems from insufficient escaping of the user-supplied\u00a0db\u00a0parameter and inadequate preparation on the existing SQL query.<br \/>This flaw allows unauthenticated attackers to execute time-based SQL Injection attacks, enabling them to append additional SQL queries into existing ones.<br \/>Consequently, attackers can extract sensitive information from the database, posing a significant risk to the security and privacy of the affected websites.<br \/><strong><code>\"Is Your System Under Attack? Try Cynet XDR: Automated Detection &amp; Response for Endpoints, Networks, &amp; Users!\"-<a href=\"https:\/\/www.cynet.com\/request-a-demo\/?utm_source=cyber_security_news&amp;utm_medium=display_ad&amp;utm_campaign=Q3-sponsored-webinars\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">&nbsp;Free Demo<\/a><\/code><\/strong><br \/>The &#8220;Email Subscribers by Icegram Express&#8221; plugin is widely used for email marketing, newsletters, and automation on WordPress and WooCommerce sites.<br \/>With over 90,000 active installations, the potential impact of this vulnerability is extensive.<br \/>Websites using this plugin are at risk of data breaches, which could expose sensitive user information, including email addresses, passwords, and other personal data.<br \/>The vulnerability was discovered by shaman0x01, a researcher from the Shaman Red Team, with a track record of identifying critical security flaws.<br \/>The researcher&#8217;s findings highlight the importance of proper input validation and query preparation in preventing SQL Injection attacks.<br \/>Notably, CVE-2024-37252 appears to duplicate this issue, underscoring the critical nature of the <a href=\"https:\/\/gbhackers.com\/regresshion-rce-flaw\/\" target=\"_blank\" rel=\"noreferrer noopener\">vulnerability.<\/a><br \/>Website administrators using the &#8220;Email Subscribers by Icegram Express&#8221; plugin are strongly advised to mitigate the risk immediately.<br \/><strong>The following steps are recommended:<\/strong><br \/>The discovery of CVE-2024-6172 is a stark reminder of the importance of robust security practices in plugin development.<br \/>As WordPress remains a popular platform for websites worldwide, ensuring the security of its plugins is crucial to maintaining the integrity and privacy of online data.<br \/>Website administrators must stay vigilant and proactive in addressing vulnerabilities to protect their sites and users from potential<a href=\"https:\/\/gbhackers.com\/advanced-cyber-security-threats\/\" target=\"_blank\" rel=\"noreferrer noopener\"> threats.<\/a><br \/><strong><strong><code>Are you from SOC\/DFIR Teams? -&nbsp;<a href=\"https:\/\/app.any.run\/?utm_source=linkedin_csn&amp;utm_medium=meme&amp;utm_campaign=pdf_june&amp;utm_content=register&amp;utm_term=02072024\/#register\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Sign up for a free ANY.RUN account!<\/a>&nbsp;to Analyse Advanced Malware Files<\/code><\/strong><\/strong><br \/>9 of 10 sites on the AppTrana network have faced a DDoS attack in the last 30 days.<br \/>Some DDoS attacks could readily be blocked by rate-limiting, IP reputation checks and other basic mitigation methods.<br \/>More than 50% of the DDoS attacks are employing botnets to send slow DDoS attacks where millions of IPs are being employed to send one or two requests per minute..<br \/>Key takeaways include:<\/p>\n<ul>\n<li>The mechanics of a low-DDoS attack<\/li>\n<li>Fundamentals of behavioural AI and rate-limiting<\/li>\n<li>Surgical mitigation actions to minimize false positives<\/li>\n<li>Role of managed services in DDoS monitoring<\/li>\n<p>Stay safe online with free daily cybersecurity updates. Sign up now!<br \/>GBHackers on security is a highly informative and reliable Cyber Security News platform that provides the latest and most relevant updates on Cyber Security News, Hacking News, Technology advancements, and Kali Linux tutorials on a daily basis. The platform is dedicated to keeping the community well-informed and up-to-date with the constantly evolving Cyber World.<br \/>Email : <a href=\"\/cdn-cgi\/l\/email-protection\" class=\"__cf_email__\" data-cfemail=\"d5b4b1b8bcbb95b2b7bdb4b6beb0a7a6fbb6bab8\">[email&#160;protected]<\/a><\/p>\n<p><a href=\"https:\/\/news.google.com\/rss\/articles\/CBMiMGh0dHBzOi8vZ2JoYWNrZXJzLmNvbS9jcml0aWNhbC13b3JkcHJlc3MtcGx1Z2luL9IBNGh0dHBzOi8vZ2JoYWNrZXJzLmNvbS9jcml0aWNhbC13b3JkcHJlc3MtcGx1Z2luL2FtcC8?oc=5\">source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A critical vulnerability has been discovered in the popular WordPress plugin &#8220;Email Subscribers by Icegram Express \u2013 Email Marketing, Newsletters, Automation for WordPress &amp; WooCommerce.&#8221;The flaw, identified as CVE-2024-6172, has been assigned a CVSS score of 9.8, indicating its severe impact.The vulnerability was publicly disclosed on July 1, 2024, and&hellip;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1099","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.yellowfalconmedia.com\/blog\/wp-json\/wp\/v2\/posts\/1099","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.yellowfalconmedia.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.yellowfalconmedia.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.yellowfalconmedia.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.yellowfalconmedia.com\/blog\/wp-json\/wp\/v2\/comments?post=1099"}],"version-history":[{"count":0,"href":"https:\/\/www.yellowfalconmedia.com\/blog\/wp-json\/wp\/v2\/posts\/1099\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.yellowfalconmedia.com\/blog\/wp-json\/wp\/v2\/media?parent=1099"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.yellowfalconmedia.com\/blog\/wp-json\/wp\/v2\/categories?post=1099"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.yellowfalconmedia.com\/blog\/wp-json\/wp\/v2\/tags?post=1099"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}