onOffice for WP-Websites, CVE-2025-32127

CVE, Research URL: CVE-2025-32127
Home page URL: Security reports for onOffice for WP-Websites
Application: onOffice for WP-Websites
Published on: Apr 04, 2025
Research Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in onOffice GmbH onOffice for WP-Websites allows SQL Injection. This issue affects onOffice for WP-Websites: from n/a through 5.7.
Affected versions: Min -, max 5.7.
Status: vulnerable