CVE-2025-14353: Improper Neutralization of Special Elements used in an SQL Command

The ZIP Code Based Content Protection plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 1.0.2 via the 'zipcode' parameter. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

CVE-2025-59008

CVE-2025-59008 relates to the WordPress plugin “ZIP Code Based Content Protection.” It describes an SQL injection caused by improper neutralization of input in versions up to 1.0.0. The vulnerability is network‑level with high privileges required and no user interaction, and it has a high impact ...

CVE-2025-59008: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in PressTigers ZIP Code Based Content Protection zip-code-based-content-protection allows SQL Injection.This issue affects ZIP Code Based Content Protection: from n/a through = 1.0.0...

WordPress plugin ZIP Code Based Content Protection SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A SQL injection vulnerability exists in WordPress...