WordPress JS Archive List Plugin < 6.1.6 - SQL Injection Vulnerability
85Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actcvss 9.3epss 1.5%
from disclosure to weapon36 days
Published on NVDAug 20
1st PoC+36d
VulnCheck+223d
exploitation probability
1.5%top 27% of all CVEs
observed exploitation
yesVulnCheck
2 public exploit(s)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Miguel Useche JS Archive List jquery-archive-list-widget allows SQL Injection.This issue affects JS Archive List: from n/a through < 6.1.6.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Affected products
Miguel Useche · JS Archive Listpublic PoCs found — 2
githubgithub.com/RandomRobbieBF/CVE-2025-54726★ 1vulncheckvulncheck.com/xdb/d07edf93ec79unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.