7.6
High
CVE-2025-58789 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle WP…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle WP Full Stripe Free wp-full-stripe-free allows SQL Injection.This issue affects WP Full Stripe Free: from n/a through <= 8.2.5.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Full Stripe Free 8.2 | earliest → 8.2.5 | No fix stated |
Other CVEs of WP Full Stripe Free
The 4 CVEs of WP Full Stripe Free →
CVE-2026-62073
Unauthenticated Broken Access Control in WP Full Stripe Free <= 8.5.6 versions
7.5
High
CVE-2026-61960
Unauthenticated Cross Site Scripting (XSS) in WP Full Stripe Free <= 8.5.0 versions
7.1
High
CVE-2026-42378
Subscriber Broken Authentication in WP Full Stripe Free <= 8.4.1 versions
6.5
Medium