CVE-2025-30589
CVSS 3.1 Score 8.5 of 10 (high)
Details
Published Apr 1, 2025
CWE ID 89
Summary
CVE-2025-30589 is an SQL Injection vulnerability affecting Flickr set slideshows. Hackers can exploit this issue by improperly neutralizing special elements in SQL commands, leading to unauthorized SQL injection. Affected versions range from n/a to 0.9, putting many users at risk. This vulnerability allows attackers to access or manipulate sensitive data, potentially leading to serious privacy breaches or system compromise. Flickr is urged to release a patch as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress