What’s Vulnerable › Vulnerabilities

CVE-2017-1002025

• Severity: high (CVSS 7.2 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-09-14 · updated 2026-06-17
• Weakness: CWE-89

Description

Vulnerability in wordpress plugin add-edit-delete-listing-for-member-module v1.0, The plugin author does not sanitize user supplied input via $act before passing it into an SQL statement.

Affected products

• Romal Patel add-edit-delete-listing-for-member-module: 1.0

References

• http://www.vapidlabs.com/advisory.php?v=196
• https://wordpress.org/plugins/add-edit-delete-listing-for-member-module/
• http://www.vapidlabs.com/advisory.php?v=196
• https://wordpress.org/plugins/add-edit-delete-listing-for-member-module/

Get alerted when CVE-2017-1002025 or the next vulnerability affects your stack