{"id":"CVE-2025-31914","aliases":["EUVD-2025-27812","GHSA-7x5x-m772-p63v"],"status":"published","title":"WordPress Pixel Form BuilderPlugin \u0026 Autoresponder plugin \u003c= 1.0.2 - SQL Injection Vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Pixel WordPress Form BuilderPlugin \u0026 Autoresponder pixel-formbuilder allows Blind SQL Injection.This issue affects Pixel WordPress Form BuilderPlugin \u0026 Autoresponder: from n/a through \u003c= 1.0.2.","severity":{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00454,"percentile":0.39857,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2025-05-23T12:44:03Z","modified":"2026-06-17T09:11:10Z","products":[{"vendor":"kamleshyadav","product":"pixel wordpress form builderplugin \u0026 autoresponder"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/pixel-formbuilder/vulnerability/wordpress-pixel-wordpress-form-builderplugin-autoresponder-1-0-2-sql-injection-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31914"},{"url":"https://patchstack.com/database/wordpress/plugin/pixel-formbuilder/vulnerability/wordpress-pixel-wordpress-form-builderplugin-autoresponder-1-0-2-sql-injection-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-7x5x-m772-p63v"}],"sources":{"cve":[{"id":"CVE-2025-31914","title":"WordPress Pixel Form BuilderPlugin \u0026 Autoresponder plugin \u003c= 1.0.2 - SQL Injection Vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Pixel WordPress Form BuilderPlugin \u0026 Autoresponder pixel-formbuilder allows Blind SQL Injection.This issue affects Pixel WordPress Form BuilderPlugin \u0026 Autoresponder: from n/a through \u003c= 1.0.2.","status":"published","published":"2025-05-23T12:44:03.05Z","modified":"2026-04-28T16:12:16.213Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","level":"critical","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:32:44.424933Z"}],"euvd":[{"id":"EUVD-2025-27812","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Pixel WordPress Form BuilderPlugin \u0026 Autoresponder pixel-formbuilder allows Blind SQL Injection.This issue affects Pixel WordPress Form BuilderPlugin \u0026 Autoresponder: from n/a through \u003c= 1.0.2.","status":"published","published":"2025-05-23T12:44:03Z","modified":"2026-04-28T16:12:16Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","level":"critical"}],"updated_at":"2026-11-02T19:05:45.594696Z"}],"ghsa":[{"id":"GHSA-7x5x-m772-p63v","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Pixel WordPress Form BuilderPlugin \u0026 Autoresponder allows Blind SQL Injection. This issue affects Pixel WordPress Form BuilderPlugin \u0026 Autoresponder: from n/a through 1.0.2.","status":"published","published":"2025-05-23T15:31:09Z","modified":"2025-05-23T15:31:13Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","level":"critical"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:02:25.260816Z"}],"nvd":[{"id":"CVE-2025-31914","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Pixel WordPress Form BuilderPlugin \u0026 Autoresponder pixel-formbuilder allows Blind SQL Injection.This issue affects Pixel WordPress Form BuilderPlugin \u0026 Autoresponder: from n/a through \u003c= 1.0.2.","status":"published","published":"2025-05-23T13:15:28.3Z","modified":"2026-06-17T09:11:10.173Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","level":"critical","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:11:09.562272Z"}]}}