PT-2026-21123 · Unknown · Teconcetheme Coven Core

Published 2026-02-20 · Updated 2026-02-22 · CVE-2025-69295

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions TeconceTheme Coven Core versions through 1.3

Description A flaw exists in TeconceTheme Coven Core that allows for Blind SQL Injection due to improper neutralization of special elements used in an SQL command. This issue could potentially allow an attacker to extract sensitive information from the database.

Recommendations Update TeconceTheme Coven Core to a version later than 1.3.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-69295

Affected Products

Teconcetheme Coven Core

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-69295 · Security Note
• https://twitter.com/CVEnew/status/2025425523359564103 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/coven-core/vulnerability/wordpress-coven-core-plugin-1-3-sql-injection-vulnerability?_s_id=cve · Note