Exploit for SQL Injection in Ultimatemember Ultimate Member

githubexploit · 2024-08-30

Description

Ultimate Member plugin for WordPress 2.1.3 to 2.8.2 SQL Injection vulnerabilit

Entry point

Parametersorting · request body

Path/wp-admin/admin-ajax.php

SQL Injection via unsanitized sorting parameter in AJAX request when custom usermeta table option is enabled.

Affected Ultimatemember Ultimate Member versions

Ultimatemember Ultimate Member< 2.8.3

All known vulnerabilities by product

Ultimate Member

CVSS 9.8 for CVE-2024-1071

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

89.4%higher than 99.8% of all CVEs

Updated 2026-06-18

Exploit Details

Modified:2025-08-22 14:30

Last Seen:2025-08-31 22:15

Reporter:fa-rrel

Written in:Python

Last commit:2024-08-30

Tags

wordpresssql injectionultimate member

Other exploits for CVE-2024-1071

2026-09-07 KitPloitKITPLOIT

CVE-2024-1071-PoC-Script

2026-09-07 KitPloitKITPLOIT

2026-09-07 KitPloitKITPLOIT

WordPress-Exploit-CVE-2024-1071

2026-09-07 KitPloitKITPLOIT

CVE-2024-1071-SQL-Injection

2026-09-07 KitPloitKITPLOIT

CVE-2024-1071-Docker

2026-09-07 KitPloitKITPLOIT

CVE-2024-1071-Docker

2026-09-06 KitPloitKITPLOIT

Exploit for SQL Injection in Ultimatemember Ultimate_Member

2024-11-01 Spid3heXGITHUB

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=BB01B0BA-B320-5F3F-AAE6-2B09EFE0EF1C
It is an exploit module for WordPress, targeting the SQL Injection vulnerability CVE-2024-1071. The vulnerability class/vector is SQL Injection. The probable entry point is the `exploit.py` script. Notable dependencies/tooling include `requests` and `bs4`. The execution context is a Python script invoked from the command line. Preconditions include a vulnerable WordPress installation. Expected impact is SQL Injection.