CVE-2025-2250

CVSS 3.1 Score 4.9 of 10 (medium)

Details

Published Mar 13, 2025

CWE ID 89

Summary

CVE-2025-2250 is a vulnerability affecting the Report Brute Force Attacks and Login Protection ReportAttacks Plugins for WordPress. This issue allows authenticated attackers with Administrator-level access to inject SQL queries through the 'orderby' parameter, which is insufficiently escaped and lacks proper preparation in all versions up to 2.32. Consequently, sensitive information can be extracted from the database. This vulnerability poses a significant risk and should be addressed promptly by updating to a patched version of the plugin.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

Report Brute Force Attacks And Login Protection Reportattacks Plugins

Affected Vendors

WordPress

Advisories, Assessments, and Mitigations

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

Measuring the US-China AI Gap

TerraStealerV2 and TerraLogger: Golden Chickens' New Malware Families Discovered

Uncovering MintsLoader With Recorded Future Malware Intelligence Hunting

Know What Matters

For Customers

For Partners