VYPR

Couponapi

by WordPress

Source repositories

CVEs (1)

  • CVE-2025-8692MedSep 11, 2025
    risk 0.32cvss 4.9epss 0.00

    The Coupon API plugin for WordPress is vulnerable to SQL Injection via the ‘log_duration’ parameter in all versions up to, and including, 6.2.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This…