{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/premium-packages--5.9.6/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:wpdm-premium-packages_project:wpdm-premium-packages:*:*:*:*:*:wordpress:*:*"],"_cs_cves":[{"cvss":7.6,"id":"CVE-2025-24659"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Premium Packages (\u003c= 5.9.6)","Download Manager"],"_cs_severities":["high"],"_cs_tags":["wordpress","sqli","plugin","web-application"],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eCVE-2025-24659 is a SQL injection vulnerability identified in the WordPress plugin 'Premium Packages - Sell Digital Products Securely' (versions 5.9.6 and below). The vulnerability stems from insufficient sanitization of the 'orderby' URL parameter within the plugin's order management dashboard (\u003ccode\u003e/wp-admin/edit.php?post_type=wpdmpro\u0026amp;page=orders\u003c/code\u003e). Successful exploitation requires administrator privileges and the presence of the base 'Download Manager' plugin. Attackers can utilize time-based blind SQL injection techniques to extract sensitive information from the underlying database.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAttacker authenticates to the target WordPress site with administrator credentials.\u003c/li\u003e\n\u003cli\u003eAttacker navigates to the Premium Packages order list dashboard.\u003c/li\u003e\n\u003cli\u003eAttacker crafts a malicious HTTP GET or POST request targeting \u003ccode\u003e/wp-admin/edit.php\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAttacker injects time-based SQL payloads (e.g., \u003ccode\u003eSLEEP()\u003c/code\u003e) into the \u003ccode\u003eorderby\u003c/code\u003e parameter.\u003c/li\u003e\n\u003cli\u003eThe application passes the unsanitized \u003ccode\u003eorderby\u003c/code\u003e value into SQL queries within \u003ccode\u003elist-orders.php\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eThe backend executes the injected SQL command, causing time delays based on the success of Boolean conditions.\u003c/li\u003e\n\u003cli\u003eAttacker measures response latency to infer database content character by character.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an authenticated administrator to exfiltrate information from the site's database via time-based blind SQL injection.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eUpgrade the 'Premium Packages - Sell Digital Products Securely' plugin to a version above 5.9.6 immediately.\u003c/li\u003e\n\u003cli\u003eAudit administrator accounts for unauthorized activity or unexpected login patterns, as this vulnerability requires elevated privileges.\u003c/li\u003e\n\u003cli\u003eImplement WAF rules to sanitize or block requests containing suspicious SQL keywords (e.g., \u003ccode\u003eSLEEP\u003c/code\u003e, \u003ccode\u003eSUBSTR\u003c/code\u003e, \u003ccode\u003eIF\u003c/code\u003e) within the \u003ccode\u003eorderby\u003c/code\u003e parameter on the specified plugin dashboard path.\u003c/li\u003e\n\u003c/ol\u003e\n","date_modified":"2026-10-30T20:01:37Z","date_published":"2026-10-30T20:01:37Z","id":"https://feed.craftedsignal.io/briefs/2026-10-cve-2025-24659/","summary":"An authenticated administrator can exploit an unescaped URL parameter in the WordPress Premium Packages plugin (\u003c= 5.9.6) to perform time-based blind SQL injection and exfiltrate database information.","title":"Premium Packages: SQL injection via orderby parameter (CVE-2025-24659)","url":"https://feed.craftedsignal.io/briefs/2026-10-cve-2025-24659/"}],"language":"en","title":"CraftedSignal Threat Feed - Premium Packages (\u003c= 5.9.6)","version":"https://jsonfeed.org/version/1.1"}