Skip to content
OpenAdvisories
Critical · 9.3 CVE-2025-49059 EUVD-2025-24766GHSA-5w3r-75pc-x5cx

WordPress CleverReach® WP Plugin <= 1.5.20 - SQL Injection Vulnerability

Published Aug 14, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CleverReach® CleverReach® WP cleverreach-wp allows SQL Injection.This issue affects CleverReach® WP: from n/a through <= 1.5.20.

Affected products

VendorProductAffectedFixed
CleverReach® CleverReach® WP ≤ 1.5.20 —

References