high8.6
CVE-2025-9587
The CTL Behance Importer Lite WordPress plugin through 1.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX act…
Impact
The CTL Behance Importer Lite WordPress plugin through 1.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.
Affected products
| Product | Affected versions |
|---|---|
| CTL Behance Importer Lite WordPress Plugin | through 1.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.