CVE-2025-31561 WordPress Ultimate Push Notifications plugin <= 1.1.8 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in M. Tuhin Ultimate Push Notifications allows SQL Injection. This issue affects Ultimate Push Notifications: from n/a through 1.1.8...

CVE-2025-31561

CVE-2025-31561 describes an SQL Injection in the WordPress plugin “Ultimate Push Notifications” affecting versions up to 1.1.8. The issue is categorized as improper input neutralization in SQL commands and is exploitable by an authenticated attacker (Subscriber+). The entry indicates a high risk ...

WordPress Ultimate Push Notifications plugin <= 1.2.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Ultimate Push Notifications versions = 1.2.0...