CVE-2025-68034: WordPress CleverReach® WP plugin <= 1.5.21 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CleverReach® CleverReach® WP cleverreach-wp allows SQL Injection.This issue affects CleverReach® WP: from n/a through <= 1.5.21.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68034?
CVE-2025-68034 is classified as a critical SQL Injection vulnerability affecting versions of the CleverReach® WP plugin up to 1.5.21.
How do I fix CVE-2025-68034?
To fix CVE-2025-68034, update the CleverReach® WP plugin to version 1.5.22 or later as recommended by the vendor.
What are the risks associated with CVE-2025-68034?
Exploitation of CVE-2025-68034 can allow attackers to execute arbitrary SQL queries, potentially leading to unauthorized access and data leakage.
Which versions of CleverReach® WP are affected by CVE-2025-68034?
CVE-2025-68034 affects all versions of the CleverReach® WP plugin up to and including version 1.5.21.
How can I check if my website is vulnerable to CVE-2025-68034?
You can check if your website is vulnerable to CVE-2025-68034 by verifying if the installed version of the CleverReach® WP plugin is 1.5.21 or below.