CVE-2025-31531: WordPress History Log by click5 plugin <= 1.0.13 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in click5 History Log by click5 history-log-by-click5 allows SQL Injection.This issue affects History Log by click5: from n/a through <= 1.0.13.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-31531?
CVE-2025-31531 is classified as a critical SQL Injection vulnerability affecting certain versions of the History Log by click5.
How do I fix CVE-2025-31531?
To mitigate CVE-2025-31531, users should update the History Log by click5 to version 1.0.14 or later.
What are the potential impacts of CVE-2025-31531?
Exploitation of CVE-2025-31531 can allow attackers to execute arbitrary SQL commands in the database.
Which versions of History Log by click5 are affected by CVE-2025-31531?
CVE-2025-31531 affects History Log by click5 versions up to and including 1.0.13.
Is there a workaround for CVE-2025-31531?
While updating to a secure version is the best option, temporary measures may include disabling the plugin until a patch is applied.