SQL Injection Vulnerability in Gestion de tarifs Plugin for WordPress

CVE-2025-7662

What is CVE-2025-7662?

The Gestion de tarifs plugin for WordPress is vulnerable to SQL Injection stemming from the 'tarif' and 'intitule' shortcodes, due to inadequate escaping of user-supplied parameters and insufficient preparation of existing SQL queries. This vulnerability allows authenticated attackers with Contributor-level access or higher to inject additional SQL queries into existing ones, potentially leading to unauthorized access and extraction of sensitive information from the database.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References