The Contest Gallery plugin for WordPress contains a critical SQL injection vulnerability that allows unauthenticated remote attackers to extract sensitive database information.

This is a blind SQL injection vulnerability (CWE-89) caused by insufficient input validation and improper escaping of user-supplied parameters. Unauthenticated attackers can leverage this flaw to append malicious SQL queries to existing database operations, potentially exposing sensitive application data.

Successful exploitation allows unauthorized third parties to bypass security controls and exfiltrate sensitive data from the WordPress database. Given the CVSS score of 7.5, this high-severity flaw poses a significant risk to data confidentiality, potentially leading to the compromise of user credentials, personal information, or proprietary business data.

Immediate Action: Update the Contest Gallery plugin to version 28.1.5 or later, which contains the necessary security fixes for both vulnerable parameters.

Proactive Monitoring: Monitor server access logs for anomalous HTTP requests targeting AJAX endpoints, specifically focusing on parameters related to lost password functions.

Compensating Controls: Deploy a Web Application Firewall (WAF) with custom rules to block SQL injection patterns targeting the identified parameters until the plugin can be updated.

Public Exploit Available: Yes, a public exploit exists via an ExploitDB entry and multiple public GitHub proof-of-concept repositories.

This vulnerability represents a significant security risk due to the presence of public exploit code and the ease of exploitation by unauthenticated actors. Administrators must prioritize updating the Contest Gallery plugin to version 28.1.5 immediately to prevent potential data breaches and unauthorized access to backend database systems.