TI-2025-09220 CVE-2025-10045 · GHSA-cmcq-cg44-p684
onOffice for WP-Websites <= 6.5.1 - Authenticated (Editor+) SQL Injection
Priority LOW 25
The onOffice for WP-Websites plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter in all versions up to, and including, 6.5.1 due to insufficient escaping on the user supplied parameter and lack…