TI-2025-20929 CVE-2025-28986 · GHSA-j224-44r5-g5gx
WordPress Epicwin Plugin plugin <= 1.5 - CSRF to SQL Injection vulnerability
Priority LOW 35
Cross-Site Request Forgery (CSRF) vulnerability in Webaholicson Epicwin Plugin epicwin-subscribers allows SQL Injection.This issue affects Epicwin Plugin: from n/a through <= 1.5.