CVE-2015-10146
📋 TL;DR
This SQL injection vulnerability in the WordPress Thumbnail Slider With Lightbox plugin allows authenticated attackers with Administrator privileges to execute arbitrary SQL queries. Attackers can extract sensitive information from the database, including user credentials and other confidential data. Only WordPress sites using vulnerable versions of this specific plugin are affected.
💻 Affected Systems
- WordPress Thumbnail Slider With Lightbox plugin
📦 What is this software?
⚠️ Risk & Real-World Impact
Worst Case
Complete database compromise leading to credential theft, data exfiltration, and potential privilege escalation to full WordPress site control.
Likely Case
Extraction of sensitive data including user credentials, personal information, and plugin-specific configuration data.
If Mitigated
Limited impact due to administrator-only access requirement and proper input validation preventing SQL injection.
🎯 Exploit Status
Exploitation requires authenticated administrator access and knowledge of SQL injection techniques
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Version after 1.0.4
Vendor Advisory: https://wordpress.org/plugins/wp-responsive-slider-with-lightbox
Restart Required: No
Instructions:
1. Log into WordPress admin panel. 2. Navigate to Plugins → Installed Plugins. 3. Find 'Thumbnail Slider With Lightbox'. 4. Click 'Update Now' if update available. 5. If no update available, deactivate and delete the plugin.
🔧 Temporary Workarounds
Remove vulnerable plugin
WordPressDeactivate and delete the vulnerable plugin version
wp plugin deactivate wp-responsive-slider-with-lightbox
wp plugin delete wp-responsive-slider-with-lightbox
🧯 If You Can't Patch
- Remove administrator access from untrusted users
- Implement web application firewall with SQL injection protection rules
🔍 How to Verify
Check if Vulnerable:
Check WordPress admin panel → Plugins → Thumbnail Slider With Lightbox version numberCheck Version:
wp plugin get wp-responsive-slider-with-lightbox --field=versionVerify Fix Applied:
Verify plugin version is greater than 1.0.4 or plugin is removed📡 Detection & Monitoring
Log Indicators:
- Unusual SQL queries in WordPress or database logs
- Multiple failed login attempts followed by administrator access
Network Indicators:
- SQL injection patterns in HTTP requests to WordPress admin endpoints
SIEM Query:
source="wordpress.log" AND "wp-responsive-slider-with-lightbox" AND ("SELECT" OR "UNION" OR "INSERT" OR "DELETE")