{"id":"CVE-2025-59008","aliases":["EUVD-2025-27433","GHSA-22jj-r264-9ffc"],"status":"published","title":"WordPress ZIP Code Based Content Protection plugin \u003c= 1.0.0 - SQL Injection vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PressTigers ZIP Code Based Content Protection zip-code-based-content-protection allows SQL Injection.This issue affects ZIP Code Based Content Protection: from n/a through \u003c= 1.0.0.","severity":{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0028,"percentile":0.20577,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2025-09-09T16:25:20Z","modified":"2026-06-17T09:45:25Z","products":[{"vendor":"presstigers","product":"zip code based content protection"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/zip-code-based-content-protection/vulnerability/wordpress-zip-code-based-content-protection-plugin-1-0-0-sql-injection-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-59008"},{"url":"https://patchstack.com/database/wordpress/plugin/zip-code-based-content-protection/vulnerability/wordpress-zip-code-based-content-protection-plugin-1-0-0-sql-injection-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-22jj-r264-9ffc"}],"sources":{"cve":[{"id":"CVE-2025-59008","title":"WordPress ZIP Code Based Content Protection plugin \u003c= 1.0.0 - SQL Injection vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PressTigers ZIP Code Based Content Protection zip-code-based-content-protection allows SQL Injection.This issue affects ZIP Code Based Content Protection: from n/a through \u003c= 1.0.0.","status":"published","published":"2025-09-09T16:25:20.873Z","modified":"2026-04-28T16:13:51.876Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:32:47.812946Z"}],"euvd":[{"id":"EUVD-2025-27433","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PressTigers ZIP Code Based Content Protection zip-code-based-content-protection allows SQL Injection.This issue affects ZIP Code Based Content Protection: from n/a through \u003c= 1.0.0.","status":"published","published":"2025-09-09T16:25:20Z","modified":"2026-04-28T16:13:51Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","level":"high"}],"updated_at":"2026-11-02T19:05:34.175052Z"}],"ghsa":[{"id":"GHSA-22jj-r264-9ffc","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PressTigers ZIP Code Based Content Protection allows SQL Injection. This issue affects ZIP Code Based Content Protection: from n/a through 1.0.0.","status":"published","published":"2025-09-09T18:31:24Z","modified":"2025-09-09T18:31:32Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:03:33.203079Z"}],"nvd":[{"id":"CVE-2025-59008","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PressTigers ZIP Code Based Content Protection zip-code-based-content-protection allows SQL Injection.This issue affects ZIP Code Based Content Protection: from n/a through \u003c= 1.0.0.","status":"published","published":"2025-09-09T17:16:14.813Z","modified":"2026-06-17T09:45:25.36Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:11:28.834562Z"}]}}