CVE-2025-49059: WordPress CleverReach® WP Plugin <= 1.5.20 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CleverReach® CleverReach® WP allows SQL Injection. This issue affects CleverReach® WP: from n/a through 1.5.20.
Other sources
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CleverReach® CleverReach® WP cleverreach-wp allows SQL Injection.This issue affects CleverReach® WP: from n/a through <= 1.5.20.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49059?
CVE-2025-49059 is classified as a critical vulnerability due to its SQL Injection nature that can allow attackers unauthorized access to the database.
How do I fix CVE-2025-49059?
To fix CVE-2025-49059, update the CleverReach® WP plugin to version 1.5.21 or later, which addresses the SQL injection vulnerability.
What systems are affected by CVE-2025-49059?
CVE-2025-49059 affects CleverReach® WP versions from n/a through 1.5.20 and the WordPress CleverReach WP Plugin of the same versions.
What type of vulnerability is CVE-2025-49059?
CVE-2025-49059 is an SQL Injection vulnerability caused by improper neutralization of special elements in SQL commands.
Can CVE-2025-49059 lead to data breaches?
Yes, CVE-2025-49059 can lead to significant data breaches as it allows attackers to manipulate SQL queries and gain access to sensitive data.