TI-2025-06401 CVE-2025-7036 · GHSA-x3vj-wfjq-r8ph
CleverReach WP <= 1.5.20 - Unauthenticated SQL Injection via title Parameter
Priority MEDIUM 40
The CleverReach® WP plugin for WordPress is vulnerable to time-based SQL Injection via the ‘title’ parameter in all versions up to, and including, 1.5.20 due to insufficient escaping on the user supplied parameter and la…