SQL Injection Vulnerability in Torod Company for Information Technology Products
CVE-2025-30936

9.3CRITICAL

Key Information:

Vendor

WordPress
Status
Torod
Vendor
CVE Published:
16 July 2025

What is CVE-2025-30936?

The Torod Company for Information Technology is affected by a vulnerability due to improper handling of special characters in SQL commands, enabling SQL Injection attacks. This flaw allows unauthorized access to sensitive data and can lead to data breaches or manipulation. Vulnerable versions of the affected product range from n/a up to version 1.9, underscoring the need for immediate mitigation and patching to protect against exploitation.

Affected Version(s)

Torod <= 1.9

References

https://patchstack.com/database/wordpress/plugin/torod/vu...
vdb-entry

CVSS V3.1

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Martino Spagnuolo (r3verii) (Patchstack Alliance)
.
CVE-2025-30936 : SQL Injection Vulnerability in Torod Company for Information Technology Products