PT-2026-21123 · Unknown · Teconcetheme Coven Core

CVE-2025-69295 · Publicado 2026-02-20 · Atualizado 2026-02-22

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions TeconceTheme Coven Core versions through 1.3

Description A flaw exists in TeconceTheme Coven Core that allows for Blind SQL Injection due to improper neutralization of special elements used in an SQL command. This issue could potentially allow an attacker to extract sensitive information from the database.

Recommendations Update TeconceTheme Coven Core to a version later than 1.3.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2025-69295

Produtos afetados

Teconcetheme Coven Core

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-69295 · Nota de Segurança
• https://twitter.com/CVEnew/status/2025425523359564103 · Publicação no Twitter
• https://patchstack.com/database/Wordpress/Plugin/coven-core/vulnerability/wordpress-coven-core-plugin-1-3-sql-injection-vulnerability?_s_id=cve · Nota