CVE-2017-20245

Wow Viral Signups 2.1 WordPress plugin contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by exploiting the unescaped 'idsignup' POST parameter. Attackers can send crafted requests to the admin-ajax.php endpoint with malicious SQL payloads in the 'idsignup' parameter to read arbitrary data from the database.

CVSS v3 8.2 HIGH

8.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 4.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
http://wow-company.com/
https://tad.group
https://wordpress.org/plugins/mwp-viral-signup/
https://www.exploit-db.com/exploits/41921
https://www.vulncheck.com/advisories/wow-viral-signups-wordpress-plugin-sql-injection

Configurations

No configuration.

History

21 Jul 2026, 07:10

Type	Values Removed	Values Added
Summary		(es) El plugin de WordPress Wow Viral Signups 2.1 contiene una vulnerabilidad de inyección SQL que permite a atacantes no autenticados extraer información de la base de datos explotando el parámetro POST 'idsignup' no escapado. Los atacantes pueden enviar solicitudes manipuladas al endpoint admin-ajax.php con payloads SQL maliciosos en el parámetro 'idsignup' para leer datos arbitrarios de la base de datos.

09 Jun 2026, 13:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-06-09 13:16

Updated : 2026-07-21 07:10

NVD link : CVE-2017-20245

Mitre link : CVE-2017-20245

CVE.ORG link : CVE-2017-20245

JSON object : View

Products Affected

No product.

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

{"id": "CVE-2017-20245", "cveTags": [{"tags": ["unsupported-when-assigned"], "sourceIdentifier": "disclosure@vulncheck.com"}], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2017-20245", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-09T13:09:10.494344Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 4.2, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.8, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"vendor": "Wow-Company", "product": "Wow Viral Signups", "versions": [{"status": "affected", "version": "2.1"}]}]}], "published": "2026-06-09T13:16:34.270", "references": [{"url": "http://wow-company.com/", "source": "disclosure@vulncheck.com"}, {"url": "https://tad.group", "source": "disclosure@vulncheck.com"}, {"url": "https://wordpress.org/plugins/mwp-viral-signup/", "source": "disclosure@vulncheck.com"}, {"url": "https://www.exploit-db.com/exploits/41921", "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/wow-viral-signups-wordpress-plugin-sql-injection", "source": "disclosure@vulncheck.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "Wow Viral Signups 2.1 WordPress plugin contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by exploiting the unescaped 'idsignup' POST parameter. Attackers can send crafted requests to the admin-ajax.php endpoint with malicious SQL payloads in the 'idsignup' parameter to read arbitrary data from the database."}, {"lang": "es", "value": "El plugin de WordPress Wow Viral Signups 2.1 contiene una vulnerabilidad de inyecci\u00f3n SQL que permite a atacantes no autenticados extraer informaci\u00f3n de la base de datos explotando el par\u00e1metro POST 'idsignup' no escapado. Los atacantes pueden enviar solicitudes manipuladas al endpoint admin-ajax.php con payloads SQL maliciosos en el par\u00e1metro 'idsignup' para leer datos arbitrarios de la base de datos."}], "lastModified": "2026-07-21T07:10:00.117", "sourceIdentifier": "disclosure@vulncheck.com"}