CVE-2025-22691

Summary

CVE-2025-22691 is an SQL Injection vulnerability affecting WP Travel, a plugin used in travel-related websites. The flaw, which allows the injection of malicious SQL commands, exists from version n/a to 10.1.0. An attacker can exploit this weakness to access or modify sensitive data, potentially leading to unauthorized access or data breaches. Users of WP Travel are urged to update to the latest version or implement appropriate security measures to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.