A critical SQL injection vulnerability in WordPress Core is being actively exploited in the wild, posing a severe risk of unauthorized database access.

This is a SQL injection flaw (CWE-89) within WordPress Core that permits an unauthenticated attacker to manipulate database queries. Successful exploitation allows for unauthorized data extraction from the underlying database.

The vulnerability carries a CVSS score of 9.5, reflecting its critical nature and ease of exploitation. Successful attacks can lead to the complete compromise of sensitive site data, including user credentials, personal information, and proprietary content, resulting in significant reputational damage and regulatory non-compliance.

Immediate Action: Update all WordPress installations to version 6.8.6, 6.9.5, or 7.0.2 immediately. These versions contain the necessary security patches to remediate the vulnerability.

Proactive Monitoring: Review database query logs for anomalous or high-volume requests that deviate from typical application behavior. Monitor for unexpected account creation or administrative privilege escalation attempts.

Compensating Controls: Implement a Web Application Firewall (WAF) with updated rulesets designed to detect and block SQL injection patterns. Restrict administrative access to known, trusted IP addresses to limit the attack surface.

Public Exploit Available: Yes, multiple public proofs-of-concept exist on GitHub.

The active exploitation of this vulnerability in the wild makes it a top-tier priority for all organizations using WordPress. Administrators must bypass standard update cycles and apply the vendor-provided patches immediately to prevent data exfiltration.