CVE-2025-30879
📋 TL;DR
This SQL injection vulnerability in the MC Woocommerce Wishlist WordPress plugin allows attackers to execute arbitrary SQL commands on the database. It affects all WordPress sites using this plugin from any version up to 1.8.9. Successful exploitation could lead to data theft, modification, or deletion.
💻 Affected Systems
- MC Woocommerce Wishlist WordPress plugin
⚠️ Manual Verification Required
This CVE does not have specific version information in our database, so automatic vulnerability detection cannot determine if your system is affected.
Why? The CVE database entry doesn't specify which versions are vulnerable (no version ranges provided by the vendor/NVD).
🔒 Custom verification scripts are available for registered users. Sign up free to download automated test scripts.
- Review the CVE details at NVD
- Check vendor security advisories for your specific version
- Test if the vulnerability is exploitable in your environment
- Consider updating to the latest version as a precaution
⚠️ Risk & Real-World Impact
Worst Case
Complete database compromise including sensitive customer data (PII, payment info), administrative takeover of WordPress site, and potential server compromise if database permissions allow file system access.
Likely Case
Data exfiltration of user information, wishlist contents, and potentially WooCommerce order data. Attackers could modify or delete database content.
If Mitigated
Limited impact with proper database user permissions, query parameterization, and web application firewall rules blocking SQL injection patterns.
🎯 Exploit Status
SQL injection typically requires some knowledge of the database structure but automated tools exist. The Patchstack advisory suggests authentication may be required.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Version after 1.8.9 (check plugin repository for latest)
Restart Required: No
Instructions:
1. Log into WordPress admin panel. 2. Navigate to Plugins → Installed Plugins. 3. Find 'MC Woocommerce Wishlist'. 4. Click 'Update Now' if available. 5. If no update available, deactivate and delete the plugin immediately.
🔧 Temporary Workarounds
Temporary plugin deactivation
WordPressDisable the vulnerable plugin until patched version is available
wp plugin deactivate mc-woocommerce-wishlist
🧯 If You Can't Patch
- Implement a web application firewall (WAF) with SQL injection rules
- Restrict database user permissions to minimum required operations
🔍 How to Verify
Check if Vulnerable:
Check WordPress admin → Plugins → Installed Plugins for 'MC Woocommerce Wishlist' version 1.8.9 or earlierCheck Version:
wp plugin get mc-woocommerce-wishlist --field=versionVerify Fix Applied:
Verify plugin version is greater than 1.8.9 in WordPress admin panel📡 Detection & Monitoring
Log Indicators:
- Unusual SQL error messages in WordPress debug logs
- Multiple failed SQL queries with unusual patterns
- Requests to wishlist endpoints with SQL syntax in parameters
Network Indicators:
- HTTP requests containing SQL keywords (SELECT, UNION, INSERT, etc.) in parameters
- Unusual traffic patterns to /wp-content/plugins/mc-woocommerce-wishlist/
SIEM Query:
source="wordpress.log" AND ("SQL syntax" OR "mysql_fetch" OR "mc-woocommerce-wishlist")