CVE-2025-49327: WordPress ShortLinks Pro plugin <= 1.0.7 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia ShortLinks Pro allows SQL Injection. This issue affects ShortLinks Pro: from n/a through 1.0.7.
Other sources
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia ShortLinks Pro shortlinkspro allows SQL Injection.This issue affects ShortLinks Pro: from n/a through <= 1.0.7.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49327?
CVE-2025-49327 is classified as a high severity vulnerability due to its ability to allow SQL Injection attacks.
How do I fix CVE-2025-49327?
To fix CVE-2025-49327, update Ruben Garcia ShortLinks Pro to version 1.0.8 or later.
What systems are affected by CVE-2025-49327?
CVE-2025-49327 affects versions of Ruben Garcia ShortLinks Pro from n/a to 1.0.7.
What kind of attacks can be executed due to CVE-2025-49327?
CVE-2025-49327 allows attackers to perform SQL Injection attacks, potentially compromising the database.
Is CVE-2025-49327 related to any specific software applications?
Yes, CVE-2025-49327 impacts both Ruben Garcia ShortLinks Pro and WordPress ShortLinks Pro versions up to 1.0.7.