CVE-2025-49049 — WordPress DZS Video Gallery plugin <= 12.39 - SQL Injection vulnerability

CVE-2025-49049

WordPress DZS Video Gallery plugin <= 12.39 - SQL Injection vulnerability PUBLISHED

Description (CNA)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ZoomIt DZS Video Gallery dzs-videogallery allows SQL Injection.This issue affects DZS Video Gallery: from n/a through <= 12.39.

Affected (CNA)

Vendor / product	Versions
ZoomIt / DZS Video Gallery	affected 0 through 12.39

CWE

CWE-89

References

https://patchstack.com/database/Wordpress/Plugin/dzs-videogallery/vulnerability/wordpress-dzs-video-gallery-plugin-12-37-sql-injection-vulnerability?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.