Skip to content
OpenAdvisories

Archive

24 January 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.6
    CVE-2025-24587 Public exploit EPSS 33%

    WordPress Email Subscription Popup plugin <= 1.2.23 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nks Email Subscription Popup email-subscribe allows Blind SQL Injection.This issue affects Email Subscription Popup: from n/a through <= 1.2.23.

  • High 7.6
    CVE-2025-24659 Public exploit

    WordPress Premium Packages – Sell Digital Products Securely plugin <= 5.9.6 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjada WPDM – Premium Packages wpdm-premium-packages allows Blind SQL Injection.This issue affects WPDM – Premium Packages: from n/a through <= 5.9.6.