CVE-2025-23931
CVSS 3.1 Score 9.3 of 10 (high)
Details
Published Jan 22, 2025
CWE ID 89
Summary
CVE-2025-23931 is an SQL injection vulnerability affecting the WordPress Local SEO plugin, from version n/a through 2.3. An attacker can exploit this blind SQL injection flaw to extract sensitive information from the database without the need for valid authentication or knowledge of specific data. This issue arises due to the plugin's failure to properly neutralize special elements used in SQL commands.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.