CVE-2025-1446

creationtimestamp| type| source ---|---|--- 2025-03-23 09:47:46+00:00| seen| https://t.me/cvedetector/20891 2025-03-23 09:59:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkzy6sfziz2x...

CVE-2025-1446

The Pods WordPress plugin before 3.2.8.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

CVE-2025-1446

CVE-2025-1446 affects Pods – Custom Content Types and Fields (WordPress plugin) prior to version 3.2.8.2. The issue is an SQL injection due to insufficient sanitization/escaping of a parameter before use in a SQL statement, enabling admin-level SQL injection. Connected sources confirm the vulnera...