VULNERABILITY INTELLIGENCE

CVE-2025-22691

CVSS score7.6 HIGH

EPSS probability0.51%

CISA KEVNot currently listed

Published2025-02-03

Last modified2026-06-17

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel wp-travel allows SQL Injection.This issue affects WP Travel: from n/a through <= 10.1.3.