CVE-2024-12032
CVE-2024-12032 is a SQL Injection vulnerability in the Tourfic WordPress plugin, potentially allowing attackers to extract sensitive database information. The vulnerability exists in versions up to 2.15.3 due to insufficient input sanitization in the 'tf_enquiry_reply_email_callback' function. Attackers with Subscriber-level access can exploit this by injecting malicious SQL queries. While the CVSS score is 0, indicating no immediate risk factors in the CVSS scoring system itself, the SOCRadar Vulnerability Risk Score (SVRS) of 30 suggests a low to moderate level of risk. This indicates that while the vulnerability might not be easily exploitable, it should still be addressed to prevent potential data breaches or other malicious activities. This vulnerability is significant because it allows unauthorized access to potentially sensitive information stored in the WordPress database.
Description
CVE-2024-12032 affects the Tourfic WordPress plugin, a popular tool for hotel and travel booking. This vulnerability is an SQL Injection (SQLi) flaw present in the plugin's tf_enquiry_reply_email_callback function. The issue arises from insufficient escaping of the enquiry_id parameter, allowing authenticated attackers with Subscriber-level access or higher to inject malicious SQL queries into existing queries. This could lead to data exfiltration from the WordPress database, potentially exposing sensitive information like user details, booking records, and financial data.
While the CVSS score is 6.5, the SVRS (SOCRadar Vulnerability Risk Score) for this CVE is 38, indicating a moderate risk. This assessment considers factors beyond the CVSS, incorporating threat intelligence, social media, and dark web analysis to provide a more comprehensive view of the threat.
Key Insights
- Exploitable by Authenticated Users: The vulnerability is exploitable by authenticated users with Subscriber-level access or higher, meaning a wider range of users could potentially exploit it.
- Data Exfiltration Risk: Successful exploitation could lead to the extraction of sensitive data from the WordPress database, compromising user privacy and potentially causing financial damage.
- Potential for Further Attacks: The SQL injection vulnerability could be used as a stepping stone for further attacks, allowing attackers to gain control over the WordPress website and potentially compromise other systems within the network.
Mitigation Strategies
- Update the Tourfic Plugin: Immediately update the Tourfic plugin to the latest version (2.15.4 or higher), as this version addresses the vulnerability.
- Restrict User Permissions: Consider limiting the user permissions of users with access to the plugin. Reducing the number of users with Subscriber-level access or higher can minimize the potential impact of the vulnerability.
- Implement Input Validation and Sanitization: Apply rigorous input validation and sanitization techniques to prevent malicious SQL queries from being injected into the database.
- Implement a Web Application Firewall (WAF): A WAF can help detect and block malicious traffic targeting the WordPress website, including SQL injection attacks.
Additional Information
If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.