2 matches found
CVE-2025-48089 WordPress Education WordPress Theme | HiStudy theme < 3.1.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Rainbow-Themes Education WordPress Theme | HiStudy histudy allows SQL Injection.This issue affects Education WordPress Theme | HiStudy: from n/a through 3.1.0...
9.3CVSS0.0036EPSS
SaveExploits0References1
PT-2025-45202
Name of the Vulnerable Software and Affected Versions Rainbow-Themes Education WordPress Theme versions prior to 3.1.0 Description An SQL Injection issue exists in the HiStudy theme due to insufficient escaping of user-supplied parameters and a lack of proper preparation of SQL queries. This allo...
9.3CVSS5.8AI score0.0036EPSS
SaveExploits0References8
20