CVE-2025-31526highCWE-89

CVE-2025-31526: falha de alta gravidade em eleopard Behance Portfolio Manager

WordPress Behance Portfolio Manager plugin <= 1.7.5 - SQL Injection vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Behance Portfolio Manager

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.5epss 0.3%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in eleopard Behance Portfolio Manager portfolio-manager-powered-by-behance allows SQL Injection.This issue affects Behance Portfolio Manager: from n/a through <= 1.7.5.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
Produtos afetados
eleopard · Behance Portfolio Manager
CVEs relacionadas — eleopard Behance Portfolio Manager

No mesmo produto, das mais perigosas para as menos.

CVE-2025-32124HIGHWordPress Behance Portfolio Manager plugin <= 1.7.5 - SQL Injection vulnerabilityEPSS 0.6%CVE-2025-29010MEDIUMWordPress Behance Portfolio Manager plugin <= 1.7.5 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-57913MEDIUMWordPress Behance Portfolio Manager plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-59135MEDIUMWordPress Behance Portfolio Manager plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-59137HIGHWordPress Behance Portfolio Manager plugin <= 1.7.5 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%