CVE-2025-30971
CVSS 3.1 Score 9.3 of 10 (high)
Details
Published Apr 1, 2025
CWE ID 89
Summary
CVE-2025-30971 is a vulnerability affecting XV Random Quotes, where an SQL Injection issue occurs due to improper neutralization of special elements used in SQL commands. This flaw allows attackers to execute malicious SQL queries, potentially leading to unauthorized data access, modification, or disclosure. The issue has been reported to impact XV Random Quotes versions from n/a through 1.40.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress