Executive brief
WP-Lister Lite for eBay is a WordPress plugin used to connect online stores with eBay listings. A security vulnerability in this plugin allows an attacker with administrative access to perform unauthorized database queries. This could lead to the exposure of sensitive information stored in the website's database, potentially compromising customer or business data.
Technical details
The WP-Lister Lite for eBay plugin for WordPress is vulnerable to SQL Injection (CWE-89) via the 'orderby' parameter in versions up to 3.8.8. The vulnerability stems from insufficient escaping of user-supplied input and a lack of proper SQL query preparation in several components, including EbayOrdersModel.php, ProfilesModel.php, and StocksLogTable.php. An authenticated attacker with administrator-level privileges can exploit this to append malicious SQL commands to existing queries. This allows for the extraction of sensitive data from the WordPress database. The attack is network-based and requires high privileges (PR:H).
Affected products
- wp-lab WP-Lister Lite for eBay up to, and including, 3.8.8
Timeline
- 2026-07-29: disclosed
- 2026-07-29: advisory
References
- https://plugins.trac.wordpress.org/browser/wp-lister-for-ebay/trunk/classes/model/EbayOrdersModel.php
- https://plugins.trac.wordpress.org/browser/wp-lister-for-ebay/trunk/classes/model/EbayOrdersModel.php
- https://plugins.trac.wordpress.org/browser/wp-lister-for-ebay/trunk/classes/model/ProfilesModel.php
- https://plugins.trac.wordpress.org/browser/wp-lister-for-ebay/trunk/classes/model/ProfilesModel.php
- https://plugins.trac.wordpress.org/browser/wp-lister-for-ebay/trunk/classes/table/StocksLogTable.php
- https://plugins.trac.wordpress.org/browser/wp-lister-for-ebay/trunk/classes/table/StocksLogTable.php
- https://www.wordfence.com/threat-intel/vulnerabilities/id/cec0d64e-7b31-4484-8237-2ab4d730ab86?source=cve