SQL Injection Vulnerability in GoodLayers Goodlayers Hostel Plugin
CVE-2025-39501

9.3CRITICAL

Key Information:

Vendor

WordPress
Status
Goodlayers Hostel
Vendor
CVE Published:
23 May 2025

What is CVE-2025-39501?

The GoodLayers Goodlayers Hostel plugin for WordPress is susceptible to a Blind SQL Injection vulnerability, allowing attackers to manipulate SQL queries through unvalidated user input. This flaw is present in versions up to 3.1.2, potentially enabling unauthorized data access and alterations within the database.

Affected Version(s)

Goodlayers Hostel <= 3.1.2

References

https://patchstack.com/database/wordpress/plugin/gdlr-hos...
vdb-entry

CVSS V3.1

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Bonds (Patchstack Alliance)
.