CVE-2025-1986

The Gutentor WordPress plugin before 3.4.7 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

Score

CVSS 3.1 4.1 Medium

Status

Analyzed - contact@wpscan.com

Published

2025-04-01

Last modified

2025-04-01

Weaknesses

CWE-89

Affected products

• Gutentor (Gutentor)
• Gutentor (Unknown)

References

• https://wpscan.com/vulnerability/f1414750-19ee-4a5d-b255-a9c20168b716/