Skip to content
OpenAdvisories
High · 7.6 CVE-2025-32676 EUVD-2025-10557GHSA-hx3q-gx9q-hxmw

WordPress Verowa Connect plugin <= 3.0.5 - SQL Injection vulnerability

Published Apr 9, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Picture-Planet GmbH Verowa Connect verowa-connect allows Blind SQL Injection.This issue affects Verowa Connect: from n/a through <= 3.0.5.

Affected products

VendorProductAffectedFixed
Picture-Planet Verowa Connect ≤ 3.0.5 —

References