CVE-2025-23774
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Jan 22, 2025
CWE ID 201
Summary
CVE-2025-23774 is a vulnerability in the NotFound WPDB to Sql library, affecting versions from n/a to 1.2. This issue involves an Insertion of Sensitive Information Into Sent Data vulnerability. Attackers can exploit this flaw to embed sensitive data into queries, thereby retrieving the data during execution. The consequences of this vulnerability could lead to unauthorized access to sensitive information. Users of the WPDB to Sql library are advised to upgrade to a patched version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.