Be informed about the latest WP SQL Injections, identified and reported publicly. WP SQLi JUN 2025 is a -33% DECREASE, compared to previous month, as specifically targeted SQL Injections. Consider for your online safety, a managed WP/Woo Security AUDIT, - OR - switching with a TOP10LIST alternative WP Security Plugin - OR - Hire professionals for managed Security.
As these SQL injection cases from publicly reported vulnerable plugins are on your domain, it opens Pandora’s box from a security point of view. The following cases made headlines PUBLICLY in the WP SQLi JUN 2025 & WP SQL Injections JUN 2025 category:
Advance Post Prefix | SQL Injection (SQLi) |
Advance Seat Reservation Management for WooCommerce | Unauthenticated SQL Injection (SQLi) |
Apollo | SQL Injection (SQLi) |
Auto Affiliate Links | SQL Injection (SQLi) |
AutomatorWP | SQL Injection (SQLi) |
Binary MLM Plan | SQL Injection (SQLi) |
Bus Ticket Booking with Seat Reservation for WooCommerce | SQL Injection (SQLi) |
Cart tracking for WooCommerce | SQL Injection (SQLi) |
Chameleon HTML5 Audio Player With/Without Playlist | SQL Injection (SQLi) |
Connexion Logs | SQL Injection (SQLi) |
CountDown Pro WP Plugin | SQL Injection (SQLi) |
Depicter Slider | Unauthenticated SQL Injection (SQLi) from 's' Parameter |
Dynamic Pricing With Discount Rules for WooCommerce | SQL Injection (SQLi) |
ELEX Product Feed for WooCommerce | SQL Injection (SQLi) |
Entrada Theme | SQL Injection (SQLi) |
Eventer | SQL Injection (SQLi) |
Facturante | SQL Injection (SQLi) |
FULL Customer | SQL Injection (SQLi) |
Funnel Builder by FunnelKit | SQL Injection (SQLi) |
Goodlayers Hostel | SQL Injection (SQLi) |
Goodlayers Hotel | SQL Injection (SQLi) |
Interview | SQL Injection (SQLi) |
JSP Store Locator | SQL Injection (SQLi) |
Likes and Dislikes | Unauthenticated SQL Injection (SQLi) |
LogDash Activity Log | Unauthenticated SQL Injection (SQLi) |
Magic Responsive Slider and Carousel WordPress | SQL Injection (SQLi) |
Majestic Support | SQL Injection (SQLi) |
Melapress File Monitor | SQL Injection (SQLi) |
Melapress File Monitor | SQL Injection (SQLi) |
Multimedia Responsive Carousel with Image Video Audio Support WordPress Plugin | SQL Injection (SQLi) |
Newsletters | SQL Injection (SQLi) orderby Parameter |
occupancyplan | Cross-Site Request Forgery (CSRF) and SQL Injection (SQLi) |
PDF Invoices for WooCommerce + Drag and Drop Template Builder | SQL Injection (SQLi) |
PGS Core | Unauthenticated SQL Injection (SQLi) |
Pixel WordPress Form BuilderPlugin & Autoresponder | SQL Injection (SQLi) |
Printcart Web and Print Product Designer for WooCommerce | SQL Injection (SQLi) |
Productive Commerce | SQL Injection (SQLi) |
ProfileGrid | SQL Injection (SQLi) |
Push Notification for Post and BuddyPress | Multiple Unauthenticated SQL Injection (SQLi) |
Radio Player Shoutcast & Icecast WordPress Plugin | SQL Injection (SQLi) |
Relevanssi | Unauthenticated SQL Injection (SQLi) |
Relevanssi Premium | Unauthenticated SQL Injection (SQLi) |
Responsive HTML5 Audio Player PRO With Playlist | SQL Injection (SQLi) |
RSVPMarker | SQL Injection (SQLi) |
School Management | SQL Injection (SQLi) |
SHOUT | SQL Injection (SQLi) |
Simple Video Directory | Unauthenticated SQL Injection (SQLi) |
SMS Alert Order Notifications – WooCommerce | SQL Injection (SQLi) |
Sticky HTML5 Music Player | SQL Injection (SQLi) |
Sticky Radio Player | SQL Injection (SQLi) |
Taskbuilder | SQL Injection (SQLi) |
TrackShip for WooCommerce | SQL Injection (SQLi) |
UberSlider | SQL Injection (SQLi) |
Ultimate Auction Pro | Unauthenticated SQL Injection (SQLi) from 'auction_id' |
Ultimate WP Mail | SQL Injection (SQLi) |
Video Player & FullScreen Video Background | SQL Injection (SQLi) |
WhatsCart Whatsapp Abandoned Cart Recovery, Order Notifications, Chat Box, OTP for WooCommerce | SQL Injection (SQLi) |
WordPress Ads Pro Plugin Multi-Purpose WordPress Advertising Manager plugin | Unauthenticated SQL Injection (SQLi) |
WPGYM | SQL Injection (SQLi) |
WPGYM | SQL Injection (SQLi) |
WP-PManager | SQL Injection (SQLi) |
YaySMTP | SQL Injection (SQLi) |
WordPress SQL Injections (SQLi) reported in 2023: | 223 |
WordPress SQL Injections (SQLi) reported in 2024: | 385 |
WordPress SQL Injections (SQLi) reported in 2025: | 417 |
How wonderful would be to simply let others take care of your chores? We absolutely understand why you would want that. This is why we propose this unique campaign: the price of a premium cup of coffee per week, for your first managed service.
Start simply by contacting us with your selections: