CVE-2025-7662

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-7662", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-07-14T20:42:50.678Z", "datePublished": "2025-08-15T08:25:41.557Z", "dateUpdated": "2026-04-08T17:25:06.634Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:25:06.634Z"}, "affected": [{"vendor": "evigeo", "product": "Gestion de tarifs", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.4", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Gestion de tarifs plugin for WordPress is vulnerable to SQL Injection via the 'tarif' and 'intitule' shortcodes in all versions up to, and including, 1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."}], "title": "Gestion de tarifs <= 1.4 - Authenticated (Contributor+) SQL Injection", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d117d930-d210-44bf-ac49-19c003ca5a24?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/gestion-tarifs/trunk/gestion-tarifs-shortcodes.php"}, {"url": "https://wordpress.org/plugins/gestion-tarifs/"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "cweId": "CWE-89", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "JohSka"}], "timeline": [{"time": "2025-08-14T20:16:13.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-08-15T16:03:32.639176Z", "id": "CVE-2025-7662", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-08-15T16:05:44.088Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-7662", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-08-15T16:03:32.639176Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-08-15T16:05:17.369Z"}}], "cna": {"title": "Gestion de tarifs <= 1.4 - Authenticated (Contributor+) SQL Injection", "credits": [{"lang": "en", "type": "finder", "value": "JohSka"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}}], "affected": [{"vendor": "evigeo", "product": "Gestion de tarifs", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.4"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-08-14T20:16:13.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d117d930-d210-44bf-ac49-19c003ca5a24?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/gestion-tarifs/trunk/gestion-tarifs-shortcodes.php"}, {"url": "https://wordpress.org/plugins/gestion-tarifs/"}], "descriptions": [{"lang": "en", "value": "The Gestion de tarifs plugin for WordPress is vulnerable to SQL Injection via the 'tarif' and 'intitule' shortcodes in all versions up to, and including, 1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-89", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:25:06.634Z"}}}, "cveMetadata": {"cveId": "CVE-2025-7662", "state": "PUBLISHED", "dateUpdated": "2026-04-08T17:25:06.634Z", "dateReserved": "2025-07-14T20:42:50.678Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-08-15T08:25:41.557Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Gestion de tarifs", "vendor": "evigeo", "versions": [{"lessThanOrEqual": "1.4", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Gestion de tarifs plugin for WordPress is vulnerable to SQL Injection via the 'tarif' and 'intitule' shortcodes in all versions up to, and including, 1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."}, {"lang": "es", "value": "El complemento Gestion de tarifs para WordPress es vulnerable a la inyecci\u00f3n SQL mediante los shortcodes \"tarif\" e \"intitule\" en todas las versiones hasta la 1.4 incluida, debido a un escape insuficiente del par\u00e1metro proporcionado por el usuario y a la falta de preparaci\u00f3n de la consulta SQL existente. Esto permite a atacantes autenticados, con acceso de colaborador o superior, a\u00f1adir consultas SQL adicionales a las consultas ya existentes, que pueden utilizarse para extraer informaci\u00f3n confidencial de la base de datos."}], "id": "CVE-2025-7662", "lastModified": "2026-06-17T10:05:26.000", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-7662", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-08-15T16:03:32.639176Z", "version": "2.0.3"}}]}, "published": "2025-08-15T09:15:29.907", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/gestion-tarifs/trunk/gestion-tarifs-shortcodes.php"}, {"source": "security@wordfence.com", "url": "https://wordpress.org/plugins/gestion-tarifs/"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d117d930-d210-44bf-ac49-19c003ca5a24?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-20T19:55:37.481708+00:00", "value": {"mitigation_remediation": ["Upgrade the Gestion de tarifs plugin to the latest version that removes the injection flaw", "If an update is not possible, disable or remove the 'tarif' and 'intitule' shortcodes that accept user input until a fix is applied", "Restrict Contributor and higher role permissions to trusted users only, and enforce strict input validation for any remaining shortcode parameters"], "summary": {"action": "Apply Patch", "impact": "Data Exfiltration via SQL Injection"}, "threat_synthesis": {"affected_systems": "This vulnerability affects the evigeo Gestion de tarifs WordPress plugin, specifically any installation using version 1.4 or earlier. Sites running these plugin versions are therefore susceptible when users with Contributor role or higher are present.", "description_and_impact": "The Gestion de tarifs plugin for WordPress is vulnerable to SQL injection through the 'tarif' and 'intitule' shortcodes in all versions up to 1.4. The lack of proper escaping and query preparation allows authenticated users with Contributor or higher privileges to append malicious SQL statements to existing queries, potentially retrieving sensitive data from the database. This flaw is a classic injection vulnerability classified under CWE-89.", "risk_and_exploitability": "The CVSS score is 6.5, indicating a medium severity, while the EPSS score of less than 1% signals a low probability of exploitation in the wild. The flaw requires authenticated access, so an attacker must already have a Contributor or higher level account on the target WordPress site. The attack can be carried out by sending crafted shortcode parameters to trigger the injection, but the limited exposure to privileged users and the absence of a public exploit reduce the overall risk. The vulnerability is not listed in the CISA KEV catalog, though it remains a significant internal threat for sites using the affected plugin version."}}}}, "created": "2025-08-16T21:40:47.867955+00:00", "updated": "2026-04-20T20:00:10.527200+00:00", "vendors": ["wordpress", "wordpress$PRODUCT$wordpress"]}