PT-2026-21147 · Unknown · Teconcetheme Uroan Core

Published 2026-02-20 · Updated 2026-02-22 · CVE-2025-69365

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions TeconceTheme Uroan Core versions through 1.4.4

Description A flaw exists in TeconceTheme Uroan Core that allows for Blind SQL Injection. This is due to improper neutralization of special elements used in an SQL command.

Recommendations Update TeconceTheme Uroan Core to a version later than 1.4.4.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-69365

Affected Products

Teconcetheme Uroan Core

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-69365 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/uroan-core/vulnerability/wordpress-uroan-core-plugin-1-4-4-sql-injection-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2025425502438392172 · Twitter Post