Critical severity9.8NVD Advisory· Published Mar 23, 2025· Updated Jun 17, 2026
CVE-2025-1446
CVE-2025-1446
Description
The Pods WordPress plugin before 3.2.8.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<3.2.8.2+ 1 more
- (no CPE)range: <3.2.8.2
- (no CPE)
Package: https://wordpress.org/plugins/pods
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/c170fb45-7ed5-40ef-99f6-8da035a23d89/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.