WP Employee Attendance System, CVE-2025-28972

CVE, Research URL: CVE-2025-28972
Home page URL: Security reports for WP Employee Attendance System
Application: WP Employee Attendance System
Published on: Jun 17, 2025
Research Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Suhas Surse WP Employee Attendance System allows Blind SQL Injection. This issue affects WP Employee Attendance System: from n/a through 3.5.
Affected versions: max 3.5.
Status: vulnerable