CVE-2025-22542: WordPress Virtual Bot Plugin <= 1.0.0 - SQL Injection vulnerability
9.3
CVSS
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ofek Nakar Virtual Bot allows Blind SQL Injection.This issue affects Virtual Bot: from n/a through 1.0.0.
Classification
CVE ID: CVE-2025-22542
CVSS Base Severity: CRITICAL
CVSS Base Score: 9.3
Affected Products
Vendor: Ofek Nakar
Product: Virtual Bot
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.48% (scored less or equal to compared to others)
EPSS Date: 2025-02-07 (when was this score calculated)