CVE-2025-11454

Name of the Vulnerable Software and Affected Versions The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress versions through 0.5.5

Description The plugin is susceptible to SQL Injection due to insufficient escaping of user-supplied parameters and inadequate preparation of existing SQL queries within the eos scfm duplicate post as draft() function. This allows authenticated attackers with Contributor-level access or higher to inject additional SQL queries into existing queries, potentially enabling the extraction of sensitive information from the database.

Recommendations Update The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress to a version later than 0.5.5.