SQL Injection Vulnerability in Advanced Coupons for WooCommerce from Josh Kohlbach
CVE-2025-62015

7.6HIGH

Key Information:

Vendor

WordPress
Status
Advanced Coupons For WooCommerce Coupons
Vendor
CVE Published:
22 October 2025

What is CVE-2025-62015?

A vulnerability in the Advanced Coupons for WooCommerce Coupons plugin by Josh Kohlbach has been identified, allowing for improper neutralization of special elements used in SQL commands, leading to SQL injection risks. This issue, affecting versions from n/a to 4.6.8, can enable attackers to execute arbitrary SQL queries, potentially compromising database integrity and exposing sensitive information.

Affected Version(s)

Advanced Coupons for WooCommerce Coupons <= n/a

References

https://vdp.patchstack.com/database/Wordpress/Plugin/adva...
vdb-entry

CVSS V3.1

Score:
7.6
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Phat RiO - BlueRock (Patchstack Alliance)
JSON
.
CVE-2025-62015 : SQL Injection Vulnerability in Advanced Coupons for WooCommerce from Josh Kohlbach