CVE-2025-31542: WordPress My auctions allegro plugin <= 3.6.20 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Blind SQL Injection.This issue affects My auctions allegro: from n/a through <= 3.6.20.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-31542?
CVE-2025-31542 has a high severity rating due to its potential for allowing blind SQL injection attacks.
How do I fix CVE-2025-31542?
To fix CVE-2025-31542, update the My auctions allegro plugin to version 3.6.21 or later.
What versions are affected by CVE-2025-31542?
CVE-2025-31542 affects My auctions allegro plugin versions up to and including 3.6.20.
What is the risk associated with CVE-2025-31542?
The risk associated with CVE-2025-31542 includes unauthorized access to sensitive data and potential database manipulation.
Is CVE-2025-31542 remotely exploitable?
Yes, CVE-2025-31542 is remotely exploitable, allowing attackers to execute SQL injection attacks from outside the affected system.