TI-2025-05003 CVE-2025-5563 · GHSA-xxw7-22gg-jp7x
WP-Addpub <= 1.2.8 - Authenticated (Contributor+) SQL Injection
Priority LOW 29
The WP-Addpub plugin for WordPress is vulnerable to SQL Injection via the 'wp-addpub' shortcode in all versions up to, and including, 1.2.8 due to insufficient escaping on the user supplied parameter and lack of sufficie…