Skip to content
OpenAdvisories
High · 7.6 CVE-2025-49421 EUVD-2025-17302GHSA-7pwr-xw6h-c3h8

WordPress WP Text Expander plugin <= 1.0.1 - SQL Injection Vulnerability

Published Jun 6, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Andrei Filonov WP Text Expander wp-text-expander allows SQL Injection.This issue affects WP Text Expander: from n/a through <= 1.0.1.

Affected products

VendorProductAffectedFixed
Andrei Filonov WP Text Expander ≤ 1.0.1 —

References