PT-2025-12524 · WordPress · Pods

Dmitry Ignatyev · Publicado 2025-03-23 · Atualizado 2025-03-23 · CVE-2025-1446

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions The Pods WordPress plugin versions prior to 3.2.8.2

Description The issue allows admins to perform SQL injection attacks due to the lack of sanitization and escaping of a parameter before using it in a SQL statement.

Recommendations For versions prior to 3.2.8.2, update to version 3.2.8.2 or later to resolve the issue.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2025-1446

Produtos afetados

Pods

Referências · 8

• 🔥 https://wpscan.com/vulnerability/c170fb45-7ed5-40ef-99f6-8da035a23d89 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1446 · Nota
• https://t.me/cvedetector/20891 · Publicação no Telegram
• https://t.me/cvetracker/19694 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-1446 · Aviso do Fabricante
• https://t.me/cvenotify/115818 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1903699291451134158 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-1446 · Nota de Segurança