Threats tagged 'ghsa-mfr2-x32q-q762'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.5	CVE-2025-9462The WP2LEADS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all versions Medium6.52026-10-31GCVE DatabaseCVE-2025-9462 The WP2LEADS WordPress plugin versions up to and including 3.5.6 contain a time-based SQL Injection vulnerability via the 'order' parameter. This flaw allows authenticated users with Subscriber-level access or higher to inject additional SQL queries due to insufficient escaping and lack of proper query preparation. Exploitation can lead to unauthorized extraction of sensitive database information. Report on CVE-2025-9462 Vulnerability CWE-89 #ghsa-mfr2-x32q-q762	GCVE Database	2026-10-31

Page 1 of 1