CVE-2026-5651 2wstechnologies CVE debrief

Who should care

WordPress administrators and users with Administrator-level access who have the Askeet plugin installed should be aware of this vulnerability and take necessary precautions to prevent exploitation.

Technical summary

The Askeet plugin for WordPress is vulnerable to SQL Injection via the 'sql_query' parameter in multiple AJAX actions (askeet_execute_sql_query, askeet_export_all_results) in all versions up to, and including, 3.0. This is due to the askeet_is_safe_query() filter being bypassable using MySQL conditional comments. The filter strips regular block comments before checking for forbidden SQL keywords, but MySQL interprets conditional comments as executable code.

Defensive priority

Authenticated attackers with Administrator-level access could exploit this vulnerability to extract sensitive information from the database.

Recommended defensive actions

• Inventory and verify the Askeet plugin version on all WordPress installations
• Restrict access to the plugin's AJAX actions to prevent unauthorized usage
• Implement additional monitoring to detect potential SQL injection attempts
• Consider replacing the Askeet plugin with a more secure alternative
• Apply the vendor's remediation or patch as soon as it becomes available

Evidence notes

The Askeet plugin for WordPress is vulnerable to SQL Injection via the 'sql_query' parameter in multiple AJAX actions. This issue arises from the askeet_is_safe_query() filter being bypassable using MySQL conditional comments. Authenticated attackers with Administrator-level access and above can append additional SQL queries into existing queries to extract sensitive information from the database.

Official resources