CVE-2025-30628

🗓️ 31 Dec 2025 20:03:50Reported by PatchstackType

SQL injection vulnerability in WordPress Amazon Affiliates Addon for the WPBakery Page Builder plugin up to version 1.2.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-30628	31 Dec 202520:56	–	circl
CNNVD	WordPress plugin Azon Addon Js Composer SQL注入漏洞	31 Dec 202500:00	–	cnnvd
Cvelist	CVE-2025-30628 WordPress Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) plugin <= 1.2 - SQL Injection Vulnerability	31 Dec 202520:03	–	cvelist
EUVD	EUVD-2025-206068	31 Dec 202521:30	–	euvd
NVD	CVE-2025-30628	31 Dec 202520:15	–	nvd
Patchstack	WordPress Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) plugin <= 1.2 - SQL Injection Vulnerability	7 Jul 202512:51	–	patchstack
Positive Technologies	PT-2025-54445	31 Dec 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-30628	1 Jan 202620:27	–	redhatcve
Vulnrichment	CVE-2025-30628 WordPress Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) plugin <= 1.2 - SQL Injection Vulnerability	31 Dec 202520:03	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (July 7, 2025 to July 13, 2025)	17 Jul 202515:42	–	wordfence

Vulners

Node

aa-team amazon_affiliates_addon_for_wpbakery_page_builder_(formerly_visual_composer)Range≤1.2wordpress

[
  {
    "defaultStatus": "unaffected",
    "product": "Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer)",
    "vendor": "AA-Team",
    "versions": [
      {
        "lessThanOrEqual": "1.2",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/wordpress/plugin/azon-addon-js-composer/vulnerability/wordpress-amazon-affiliates-addon-for-wpbakery-page-builder-formerly-visual-composer-1-2-sql-injection-vulnerability

28 Apr 2026 19:30Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.18.5

EPSS0.00029

SSVC

CWE-89