Skip to content
OpenAdvisories
High · 7.6 CVE-2025-43833 EUVD-2025-28014GHSA-mhg9-c8wr-hm8x

WordPress Absolute Links plugin <= 1.1.1 - SQL Injection vulnerability

Published May 19, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Amir Helzer Absolute Links absolute-links allows Blind SQL Injection.This issue affects Absolute Links: from n/a through <= 1.1.1.

Affected products

VendorProductAffectedFixed
Amir Helzer Absolute Links ≤ 1.1.1 —

References