CVE-2025-49404

CVE-2025-49404 is a SQL Injection vulnerability in the WordPress Listeo-Core plugin (Purethemes) affecting versions up to 1.9.32. It stems from improper neutralization of special elements in SQL commands. Reported CVSS v3.1 base score 8.5 (Network, Low attack complexity, Privileges required: Low,...