SQL Injection Vulnerability in ArielBrailovsky-ViralAd Plugin for WordPress
CVE-2025-2107
7.5HIGH
What is CVE-2025-2107?
The ArielBrailovsky-ViralAd plugin for WordPress has a SQL Injection vulnerability that arises from inadequate escaping of the user-supplied 'id' parameter in the printResultAndDie() function. This flaw allows unauthenticated attackers to inject malicious SQL queries, thereby potentially gaining access to sensitive database information. The vulnerability affects all versions of the plugin up to and including 1.0.8, making it particularly concerning for users of older WordPress installations.
Affected Version(s)
ArielBrailovsky-ViralAd * <= 1.0.8