7.6
Élevée
CVE-2025-58789 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle WP…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle WP Full Stripe Free wp-full-stripe-free allows SQL Injection.This issue affects WP Full Stripe Free: from n/a through <= 8.2.5.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP Full Stripe Free 8.2 | premières → 8.2.5 | Pas de correctif indiqué |
Autres CVE de WP Full Stripe Free
Les 4 CVE de WP Full Stripe Free →
CVE-2026-62073
Unauthenticated Broken Access Control in WP Full Stripe Free <= 8.5.6 versions
7.5
Élevée
CVE-2026-61960
Unauthenticated Cross Site Scripting (XSS) in WP Full Stripe Free <= 8.5.0 versions
7.1
Élevée
CVE-2026-42378
Subscriber Broken Authentication in WP Full Stripe Free <= 8.4.1 versions
6.5
Moyenne