Skip to content
OpenAdvisories
Critical · 9.3 CVE-2025-69309 EUVD-2025-207946GHSA-gxg3-7vjc-h392

WordPress Saasplate Core plugin <= 1.2.8 - SQL Injection vulnerability

Published Feb 20, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Saasplate Core saasplate-core allows Blind SQL Injection.This issue affects Saasplate Core: from n/a through <= 1.2.8.

Affected products

VendorProductAffectedFixed
TeconceTheme Saasplate Core ≤ 1.2.8 —

References