Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-27660

Malicious code in bioql PyPI...

4.9CVSS6.5AI score0.00056EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/09/13 7:25 a.m.3 views

CVE-2025-8692

The Coupon API plugin for WordPress is vulnerable to SQL Injection via the ‘logduration’ parameter in all versions up to, and including, 6.2.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

4.9CVSS5.9AI score0.00056EPSS
Exploits0References1
NVD
NVD
added 2025/09/11 8:15 a.m.6 views

CVE-2025-8692

The Coupon API plugin for WordPress is vulnerable to SQL Injection via the ‘logduration’ parameter in all versions up to, and including, 6.2.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

4.9CVSS0.00056EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/09/11 7:24 a.m.4 views

CVE-2025-8692 Coupon API <= 6.2.12 - Authenticated (Administrator+) SQL Injection via 'log_duration'

The Coupon API plugin for WordPress is vulnerable to SQL Injection via the ‘logduration’ parameter in all versions up to, and including, 6.2.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

4.9CVSS5.9AI score0.00056EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/09/11 7:24 a.m.7 views

CVE-2025-8692 Coupon API <= 6.2.12 - Authenticated (Administrator+) SQL Injection via 'log_duration'

The Coupon API plugin for WordPress is vulnerable to SQL Injection via the ‘logduration’ parameter in all versions up to, and including, 6.2.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

4.9CVSS0.00056EPSS
Exploits0References4
CVE
CVE
added 2025/09/11 7:24 a.m.15 views

CVE-2025-8692

CVE-2025-8692 affects the Coupon API plugin for WordPress (versions up to 6.2.9). An authenticated attacker with Administrator+ privileges can exploit SQL Injection via the log_duration parameter to append additional SQL queries and potentially exfiltrate data. Remediation per Patchstack and rela...

4.9CVSS5.9AI score0.00056EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/09/11 12:0 a.m.5 views

PT-2025-37138

The Coupon API plugin for WordPress is vulnerable to SQL Injection via the ‘log duration’ parameter in all versions up to, and including, 6.2.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

4.9CVSS6.6AI score0.00056EPSS
Exploits0References5
Rows per page
Query Builder