Description
Contributor SQL Injection in eRoom <= 1.7.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| DigitalME | eRoom | ≤ 1.7.1 | — |
High · 8.5
CVE-2026-25405
EUVD-2026-48147GHSA-32m9-v73v-vqc6
WordPress eRoom plugin <= 1.7.1 - SQL Injection vulnerability
Published Jul 23, 2026 · Updated Jul 23, 2026 · Assigned by Patchstack