SQL Injection Vulnerability in gopiplus iFrame Images Gallery
CVE-2025-30969

8.5HIGH

Key Information:

Vendor

WordPress
Status
Iframe Images Gallery
Vendor
CVE Published:
4 July 2025

What is CVE-2025-30969?

The gopiplus iFrame Images Gallery plugin for WordPress has a vulnerability that allows an attacker to execute arbitrary SQL commands through improperly sanitized inputs. This security flaw poses risks by enabling unauthorized access to the database, potentially leading to data manipulation or exposure. It affects all versions from n/a through 9.0, making it crucial for users to apply security updates and sanitize inputs to mitigate such risks.

Affected Version(s)

iFrame Images Gallery <= 9.0

References

https://patchstack.com/database/wordpress/plugin/wp-ifram...
vdb-entry

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Peter Thaleikis (Patchstack Alliance)
.
CVE-2025-30969 : SQL Injection Vulnerability in gopiplus iFrame Images Gallery