CVE-2025-30788

Name of the Vulnerable Software and Affected Versions Eli EZ SQL Reports Shortcode Widget and DB Backup versions n/a through 5.25.08

Description The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability that also allows SQL Injection. This means an attacker could potentially force a user to perform unintended actions on the web application, and also inject malicious SQL code to manipulate the database.

Recommendations For versions n/a through 5.25.08, update to a version that includes a fix for the CSRF and SQL Injection vulnerabilities. As a temporary workaround, consider restricting access to sensitive database operations until a patch is available. Avoid using the vulnerable Eli EZ SQL Reports Shortcode Widget and DB Backup until the issue is resolved.