Skip to content
OpenAdvisories
Critical · 9.3 CVE-2025-68034 EUVD-2026-4013GHSA-3cxv-pxqj-hqq3

WordPress CleverReach® WP plugin <= 1.5.21 - SQL Injection vulnerability

Published Jan 22, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CleverReach® CleverReach® WP cleverreach-wp allows SQL Injection.This issue affects CleverReach® WP: from n/a through <= 1.5.21.

Affected products

VendorProductAffectedFixed
CleverReach® CleverReach® WP ≤ 1.5.21 —

References