Threats tagged 'ghsa-vj93-5g8p-pghq'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.9	CVE-2025-12750The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to SQL Injection via Medium4.92025-11-21GCVE DatabaseCVE-2025-12750 The Groundhogg WordPress plugin versions up to and including 4.2.6.1 contain a SQL Injection vulnerability via the 'term' parameter. This flaw allows authenticated users with Administrator-level access or higher to inject additional SQL queries, potentially extracting sensitive database information. The vulnerability arises from insufficient escaping and lack of proper query preparation. Report on CVE-2025-12750 Vulnerability CWE-89 #ghsa-vj93-5g8p-pghq	GCVE Database	2025-11-21

Page 1 of 1