CVE-2025-47651

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Infility Infility Global infility-global allows SQL Injection.This issue affects Infility Global: from n/a through = 2.15.06...

CVE-2025-47651

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Infility Infility Global infility-global allows SQL Injection.This issue affects Infility Global: from n/a through = 2.15.06...

Chinese-Linked Hackers Targeted 70+ Global Organizations, SentinelLABS

SentinelLABS uncovers widespread China-linked cyber espionage targeting over 70 global organizations and cybersecurity firms between July 2024 and…...

CVE-2025-47651

CVE-2025-47651 affects Infility Global WordPress plugin. The vulnerability is an SQL Injection arising from improper neutralization of input in Infility Global (affected versions n/a–2.12.4 per initial record; Patchstack lists Infility Global

CVE-2025-47651 WordPress Infility Global plugin <= 2.15.06 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Infility Infility Global infility-global allows SQL Injection.This issue affects Infility Global: from n/a through = 2.15.06...

CVE-2025-47651 WordPress Infility Global <= 2.12.4 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Infility Infility Global allows SQL Injection. This issue affects Infility Global: from n/a through 2.12.4...

CVE-2025-47651: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Infility Infility Global infility-global allows SQL Injection.This issue affects Infility Global: from n/a through = 2.15.06...

PT-2025-24510 · Unknown · Infility Global

Name of the Vulnerable Software and Affected Versions: Infility Global versions n/a through 2.12.4 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations:...

WordPress plugin Infility has a SQL injection vulnerability

WordPress Infility Global is a plugin for managing the global settings of your WordPress website. WordPress Infility Global suffers from a SQL injection vulnerability. The vulnerability stems from improper neutralization of special elements and can be exploited by an attacker to read or modify...

CVE-2025-30630

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pozzad Global Translator global-translator allows Stored XSS.This issue affects Global Translator: from n/a through = 2.0.2...

CVE-2025-30632

Cross-Site Request Forgery CSRF vulnerability in pozzad Global Translator global-translator allows Cross Site Request Forgery.This issue affects Global Translator: from n/a through = 2.0.2...

CVE-2025-30630

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pozzad Global Translator global-translator allows Stored XSS.This issue affects Global Translator: from n/a through = 2.0.2...

CVE-2025-30632

Cross-Site Request Forgery CSRF vulnerability in pozzad Global Translator global-translator allows Cross Site Request Forgery.This issue affects Global Translator: from n/a through = 2.0.2...

Cultivating Growth and Development at Rapid7

At Rapid7, we’re pushing the boundaries on what a cybersecurity company can be as we work to build a more secure digital future. In a field where the threat landscape continues to evolve, continuous learning and the development of our people becomes an engine for company success and innovation...

CVE-2025-30630

CVE-2025-30630 : The Red Hat advisory confirms an Improper Neutralization of Input During Web Page Generation (Stored XSS) in the pozzad Global Translator WordPress plugin, affecting versions up to 2.0.2. The Wordfence page also notes this CVE, describing a Stored XSS in Global Translator, with n...

CVE-2025-30632

CVE-2025-30632 describes a Cross-Site Request Forgery (CSRF) vulnerability in the pozzad Global Translator WordPress plugin. Affected software: Global Translator (versions up to 2.0.2). Root cause: CSRF vulnerability that could enable an attacker to induce authenticated users to perform unwanted ...

CVE-2025-30630 WordPress Global Translator plugin <= 2.0.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pozzad Global Translator global-translator allows Stored XSS.This issue affects Global Translator: from n/a through = 2.0.2...

CVE-2025-30632 WordPress Global Translator plugin <= 2.0.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in pozzad Global Translator global-translator allows Cross Site Request Forgery.This issue affects Global Translator: from n/a through = 2.0.2...

CVE-2025-30630 WordPress Global Translator plugin <= 2.0.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pozzad Global Translator global-translator allows Stored XSS.This issue affects Global Translator: from n/a through = 2.0.2...

CVE-2025-30632 WordPress Global Translator plugin <= 2.0.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in pozzad Global Translator global-translator allows Cross Site Request Forgery.This issue affects Global Translator: from n/a through = 2.0.2...