CVE-2025-48141

CVE-2025-48141 concerns a SQL Injection in the WordPress plugin Multi CryptoCurrency Payments (vulnerable from unknown n/a up to 2.0.3). The issue is described as an improper neutralization of special elements used in an SQL command, enabling unauthenticated network-based access with potential im...

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress plugin Payments versions prior to 3.7.0.1,...