CVE-2025-39518

CVE-2025-39518 describes an SQL Injection in the WordPress plugin BMA Lite – Appointment Booking and Scheduling . The vulnerability affects versions

CVE-2025-39518 WordPress BMA Lite <= 1.4.2 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RedefiningTheWeb BMA Lite allows SQL Injection. This issue affects BMA Lite: from n/a through 1.4.2...