CVE-2025-0723
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Mar 22, 2025
Updated: Mar 27, 2025
CWE ID 89
Summary
CVE-2025-0723 is a vulnerability affecting the ProfileGrid plugin for WordPress. This issue allows authenticated attackers with Subscriber-level access or higher to conduct blind and time-based SQL Injections through the rid and search parameters. The vulnerability stems from insufficient escaping on user-supplied input and a lack of SQL query preparation. As a result, attackers can append additional SQL queries to existing ones, potentially extracting sensitive information from the database.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.