The Plugin Organizer WordPress plugin before 10.2.4 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers to perform SQL injection attacks.
Loading...
Loading...
Score 6.5 from GitHub Security Advisory published 2025-12-29. NVD baseline CVSS 8.6; sources differ by 2.1.
The Plugin Organizer WordPress plugin before 10.2.4 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers to perform SQL injection attacks.
December 29, 2025
April 15, 2026
Each row is a source pipeline that fetched or updated this CVE on that date, with what changed. For example, "NVD update" means NVD published or revised its analysis for this CVE; "MITRE cvelistV5" means we ingested or refreshed it from the CNA feed. Most recent first.
See which npm, PyPI, Go, and Maven packages are affected by CVE-2025-13417
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.