CVE-2020-9006 Explained : Impact and Mitigation

The Popup Builder plugin for WordPress versions 2.2.8 through 2.6.7.6 is vulnerable to SQL injection via PHP Deserialization, potentially leading to Remote Code Execution.

Understanding CVE-2020-9006

This CVE involves a security vulnerability in the Popup Builder plugin for WordPress that allows attackers to exploit SQL injection via PHP Deserialization.

What is CVE-2020-9006?

The Popup Builder plugin for WordPress versions 2.2.8 through 2.6.7.6 is susceptible to SQL injection through the sgImportPopups function in sg_popup_ajax.php. This vulnerability arises from attacker-controlled data manipulation using the attachmentUrl POST variable, enabling the creation of a malicious WordPress Administrator account. This unauthorized access could result in potential Remote Code Execution due to the ability of Administrators to execute PHP code on WordPress instances.

The Impact of CVE-2020-9006

The exploitation of this vulnerability can lead to severe consequences, including the unauthorized creation of Administrator accounts and potential Remote Code Execution on affected WordPress instances.

Technical Details of CVE-2020-9006

The technical aspects of the CVE provide insights into the vulnerability and its implications.

Vulnerability Description

The vulnerability in the Popup Builder plugin allows for SQL injection via PHP Deserialization, enabling attackers to manipulate data and create unauthorized Administrator accounts.

Affected Systems and Versions

Plugin: Popup Builder
Versions: 2.2.8 through 2.6.7.6

Exploitation Mechanism

The vulnerability is exploited through the sgImportPopups function in sg_popup_ajax.php by manipulating the attachmentUrl POST variable to inject malicious SQL code.

Mitigation and Prevention

Protecting systems from CVE-2020-9006 requires immediate actions and long-term security measures.

Immediate Steps to Take

Update the Popup Builder plugin to version 3.x, where the issue has been fixed.
Monitor Administrator accounts for any unauthorized changes.
Implement strict input validation to prevent SQL injection attacks.

Long-Term Security Practices

Regularly update plugins and software to patch known vulnerabilities.
Conduct security audits to identify and address potential weaknesses in WordPress installations.

Patching and Updates

Ensure all WordPress plugins are up to date to prevent exploitation of known vulnerabilities.