SQL Injection Vulnerability in GoodLayers Goodlayers Hostel Plugin
CVE-2025-39501

9.3CRITICAL

Key Information:

Vendor

WordPress
Status
Goodlayers Hostel
Vendor
CVE Published:
23 May 2025

What is CVE-2025-39501?

The GoodLayers Goodlayers Hostel plugin for WordPress is susceptible to a Blind SQL Injection vulnerability, allowing attackers to manipulate SQL queries through unvalidated user input. This flaw is present in versions up to 3.1.2, potentially enabling unauthorized data access and alterations within the database.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Goodlayers Hostel <= 3.1.2

References

https://patchstack.com/database/wordpress/plugin/gdlr-hos...
vdb-entry

CVSS V3.1

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Bonds (Patchstack Alliance)
JSON
.