SQL Injection Vulnerability in Find Me On Plugin for WordPress
CVE-2025-10635
Currently unrated
Key Information:
- Vendor
WordPress
- Status
- Vendor
- CVE Published:
- 8 October 2025
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2025-10635?
The Find Me On WordPress plugin, up to version 2.0.9.1, is susceptible to SQL injection due to improper sanitization and escaping of user input within SQL statements. This vulnerability allows users with subscriber-level access or higher to manipulate database queries, potentially leading to unauthorized data exposure and alteration. It is crucial for users to update the plugin to mitigate these risks and secure their WordPress installations.
Affected Version(s)
Find Me On 0 <= 2.0.9.1
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.