TI-2025-07955 CVE-2025-8692 · GHSA-pq4q-w6mr-gvxc
Coupon API <= 6.2.12 - Authenticated (Administrator+) SQL Injection via 'log_duration'
Priority LOW 23
The Coupon API plugin for WordPress is vulnerable to SQL Injection via the ‘log_duration’ parameter in all versions up to, and including, 6.2.12 due to insufficient escaping on the user supplied parameter and lack of suf…