CVE-2025-28983

CRÍTICO 9.8CVE-2025-28983 · Published 04/07/2025 · updated 17/06/2026

Em resumo

CVE-2025-28983 é uma vulnerabilidade CRÍTICO (CVSS 9.8).
Chance de exploração nos próximos 30 dias (EPSS): 0.36%, maior que 29.3% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ClickandPledge Click & Pledge Connect allows Privilege Escalation. This issue affects Click & Pledge Connect: from 25.04010101 through WP6.8.

References

patchstack.com/database/wordpress/plugin/click-pledge-connect/vulnerability/wordpress-click-pledge-connect-plugin-25-04010101-wp6-8-privilege-escalation-via-sql-injection-vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free