{"id":"CVE-2025-31911","aliases":["EUVD-2025-14721","GHSA-gv9p-8hmj-8cfq"],"status":"published","title":"WordPress Social Share And Social Locker plugin \u003c= 1.4.2 - SQL Injection vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems Social Share And Social Locker social-share-and-social-locker-arsocial allows Blind SQL Injection.This issue affects Social Share And Social Locker: from n/a through \u003c= 1.4.2.","severity":{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00382,"percentile":0.32664,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2025-04-03T13:27:18Z","modified":"2026-06-17T09:11:09Z","products":[{"vendor":"reputeinfosystems","product":"social share and social locker"},{"vendor":"unknown","product":"social share and social locker"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/social-share-and-social-locker-arsocial/vulnerability/wordpress-social-share-and-social-locker-plugin-1-4-2-sql-injection-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31911"},{"url":"https://patchstack.com/database/wordpress/plugin/social-share-and-social-locker-arsocial/vulnerability/wordpress-social-share-and-social-locker-plugin-1-4-2-sql-injection-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-gv9p-8hmj-8cfq"}],"sources":{"cve":[{"id":"CVE-2025-31911","title":"WordPress Social Share And Social Locker plugin \u003c= 1.4.2 - SQL Injection vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems Social Share And Social Locker social-share-and-social-locker-arsocial allows Blind SQL Injection.This issue affects Social Share And Social Locker: from n/a through \u003c= 1.4.2.","status":"published","published":"2025-04-03T13:27:18.177Z","modified":"2026-04-28T16:12:15.945Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","level":"critical","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:32:44.763463Z"}],"euvd":[{"id":"EUVD-2025-14721","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems Social Share And Social Locker social-share-and-social-locker-arsocial allows Blind SQL Injection.This issue affects Social Share And Social Locker: from n/a through \u003c= 1.4.2.","status":"published","published":"2025-04-03T13:27:18Z","modified":"2026-04-28T16:12:15Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","level":"critical"}],"updated_at":"2026-11-02T19:05:45.594696Z"}],"ghsa":[{"id":"GHSA-gv9p-8hmj-8cfq","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Social Share And Social Locker allows Blind SQL Injection. This issue affects Social Share And Social Locker: from n/a through 1.4.2.","status":"published","published":"2025-04-03T15:31:19Z","modified":"2025-04-03T15:31:26Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","level":"critical"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:00:47.148082Z"}],"nvd":[{"id":"CVE-2025-31911","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems Social Share And Social Locker social-share-and-social-locker-arsocial allows Blind SQL Injection.This issue affects Social Share And Social Locker: from n/a through \u003c= 1.4.2.","status":"published","published":"2025-04-03T14:15:43.257Z","modified":"2026-06-17T09:11:09.887Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","level":"critical","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:10:58.094557Z"}]}}