5 matches found
CVE-2025-22691
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Travel WP Travel wp-travel allows SQL Injection.This issue affects WP Travel: from n/a through = 10.1.3...
CVE-2025-22691
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Travel WP Travel wp-travel allows SQL Injection.This issue affects WP Travel: from n/a through = 10.1.3...
CVE-2025-22691
creationtimestamp| type| source ---|---|--- 2025-02-03 15:10:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113940590264088785 2025-02-03 15:16:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhbtkpu65d2j...
CVE-2025-22691
CVE-2025-22691 is a SQL injection vulnerability in the WordPress plugin WP Travel . The issue arises from improper neutralization of input in SQL commands, affecting versions up to and including 10.1.0 (and referenced advisories extend to 10.1.3). The CVSS-derived base impact in the initial recor...
CVE-2025-22691 WordPress WP Travel plugin <= 10.1.3 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Travel WP Travel wp-travel allows SQL Injection.This issue affects WP Travel: from n/a through = 10.1.3...