WordPress IP-Logger Plugin SQL Injection Scanner

The WordPress IP-Logger Plugin is a utility used by website administrators to track and log IP addresses of visitors. It provides insights into visitor locations, access times, and traffic patterns, helping optimize site performance and security. This plugin is popular among site owners who need detailed analytics without complex configurations, and it integrates seamlessly with WordPress. Regular updates ensure compatibility and functionality, making it a reliable tool for managing visitor data.

SQL Injection (SQLi) is a vulnerability that occurs when user-supplied data is improperly sanitized before being used in SQL queries. In this plugin, the flaw arises from insufficient validation of IP address inputs, allowing attackers to inject malicious SQL commands. This can lead to unauthorized database access, data manipulation, or even complete database compromise. The vulnerability is rated CVSS 7.5, indicating high severity.

The vulnerable endpoint is the IP logging function, specifically the parameter that captures and stores visitor IP addresses. When an attacker sends a crafted HTTP request with a malicious IP string, the plugin fails to sanitize it, allowing SQL commands to be executed against the WordPress database. This can be exploited without authentication, making it a critical risk for unpatched installations.

If exploited, an attacker can extract sensitive data such as user credentials, session tokens, and private content. They may also modify or delete database entries, leading to data loss or site defacement. In worst-case scenarios, the attacker could gain administrative access to the WordPress site, enabling further attacks like malware injection or complete site takeover. Immediate remediation is essential to prevent data breaches.