CVE-2025-49897 — WordPress Vertical scroll slideshow gallery v2 plugin <= 9.1 - SQL Injection vulnerability

CVE-2025-49897

WordPress Vertical scroll slideshow gallery v2 plugin <= 9.1 - SQL Injection vulnerability PUBLISHED

Description (CNA)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Vertical scroll slideshow gallery v2 allows Blind SQL Injection. This issue affects Vertical scroll slideshow gallery v2: from n/a through 9.1.

Affected (CNA)

Vendor / product	Versions
gopiplus / Vertical scroll slideshow gallery v2	affected n/a through 9.1

CWE

CWE-89

References

https://patchstack.com/database/wordpress/plugin/vertical-scroll-slideshow-gallery-v2/vulnerability/wordpress-vertical-scroll-slideshow-gallery-v2-plugin-9-1-sql-injection-vulnerability?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.