Time-Based SQL Injection Vulnerability in Ads Pro Plugin for WordPress

CVE-2025-7402

What is CVE-2025-7402?

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager is susceptible to time-based SQL injection through the 'site_id' parameter. Due to inadequate escaping of user-supplied input and insufficient preparation of existing SQL queries, this vulnerability allows unauthenticated attackers to manipulate SQL queries. As a result, they can execute arbitrary SQL commands that may lead to unauthorized access to sensitive data stored in the database. Users of all versions up to and including 4.95 should take immediate action to secure their installations.

References