critical9.3
CVE-2025-54048
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in miniOrange Custom API for WP custom-api-for-wp allows SQL…
Impact
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in miniOrange Custom API for WP custom-api-for-wp allows SQL Injection.This issue affects Custom API for WP: from n/a through <= 4.2.2.
Affected products
| Product | Affected versions |
|---|---|
| Custom API For WP: From N/A Through | through 4.2.2. |
Versions were read from the advisory text. No structured product data has been published for this record yet.