Skip to content
OpenAdvisories
High · 7.6 CVE-2025-32120 EUVD-2025-9889GHSA-24q7-r976-rj33

WordPress Easy Query – WP Query Builder plugin <= 2.0.4 - SQL Injection Vulnerability

Published Apr 4, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in edanzer Easy Query – WP Query Builder easy-query allows Blind SQL Injection.This issue affects Easy Query – WP Query Builder: from n/a through <= 2.0.4.

Affected products

VendorProductAffectedFixed
edanzer Easy Query – WP Query Builder ≤ 2.0.4 —

References