SQL Injection Vulnerability in Uptime Robot Plugin for WordPress by Aphotrax

CVE-2025-31547

What is CVE-2025-31547?

The Uptime Robot Plugin for WordPress, developed by Aphotrax, contains a vulnerability that allows for SQL injection due to improper handling of special input elements. This can enable attackers to manipulate database queries, potentially leading to unauthorized access to sensitive data or the ability to execute arbitrary SQL commands. Affected versions include all prior to 2.3. It is crucial for users to update their plugin to the latest version and apply necessary security measures to safeguard their WordPress sites.

References