SQL Injection Vulnerability in Easy Quotes by Jürgen Müller
CVE-2025-26943

9.3CRITICAL

Key Information:

Vendor
Jürgen Müller
Status
Easy Quotes
Vendor
CVE Published:
25 February 2025

Summary

The Easy Quotes plugin by Jürgen Müller is susceptible to an SQL Injection vulnerability, specifically a Blind SQL Injection flaw. This vulnerability allows attackers to exploit the improper neutralization of special elements used in SQL commands. As a result, unauthorized access to database queries could be achieved, enabling potential manipulation of sensitive data. This issue affects all versions up to 1.2.2, highlighting the importance of timely patching and adherence to security best practices.

Affected Version(s)

Easy Quotes <= 1.2.2

References

https://patchstack.com/database/wordpress/plugin/easy-quo...
vdb-entry

CVSS V3.1

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

NAWardRox (Patchstack Alliance)
.