WordPress Plugin Vulnerabilities

CleverReach® WP < 1.5.22 - Unauthenticated SQL Injection via id

Description

The plugin is vulnerable to SQL Injection due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

Proof of Concept

Affects Plugins

Plugin icon
cleverreach-wp
Fixed in 1.5.22

References

CVE
CVE-2025-68034
URL
https://vdp.patchstack.com/database/wordpress/plugin/cleverreach-wp/vulnerability/wordpress-cleverreach-wp-plugin-1-5-22-sql-injection-vulnerability

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
7.5 (high)

Miscellaneous

Original Researcher
0xd4rk5id3
Verified
Yes
WPVDB ID
9f8cf6c8-1cb8-4c8f-aa92-3d5221687e70

Timeline

Publicly Published
2026-01-15 (about 5 months ago)
Added
2026-01-19 (about 5 months ago)
Last Updated
2026-06-27 (about 7 hours ago)

Other

Published
Title
Published
2024-12-02
Title
BP Profile Shortcodes Extra <= 2.6.0 - Authenticated (Contributor+) SQL Injection via tab Parameter
Published
2021-08-22
Title
The Sorter <= 1.0 - Authenticated SQL Injection
Published
2025-03-31
Title
Behance Portfolio Manager < 1.8.0 - Authenticated (Contributor+) SQL Injection
Published
2021-11-22
Title
Ni WooCommerce Custom Order Status < 1.9.7 - Subscriber+ SQL Injection
Published
2024-03-19
Title
Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other platforms < 1.82.6 - SQL Injection to Reflected Cross-Site Scripting via integration_id