Vulnerabilities and security researches forwp-employee-attendance-system wp-employee-attendance-system

Jun 18, 2025

CVE, Research URL: CVE-2025-28972
Home page URL: Security reports for WP Employee Attendance System
Application: WP Employee Attendance System
Date: Jun 17, 2025
Research Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Suhas Surse WP Employee Attendance System allows Blind SQL Injection. This issue affects WP Employee Attendance System: from n/a through 3.5.
Affected versions: Min -, max -.
Status: vulnerable