CVE-2019-25221

Summary

CVE-2019-25221 is a vulnerability affecting the Responsive Filterable Portfolio plugin for WordPress. In versions up to 1.0.8, the plugin fails to properly escape user-supplied input in the 'id' parameter, allowing unauthenticated attackers to inject additional SQL queries into existing ones. Consequently, sensitive information can be extracted from the database. This issue stems from insufficient preparation of the existing SQL queries, leaving the plugin vulnerable to SQL Injection attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.