9.3
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ThemeMove Learts Addons learts-addons allows SQL Injection.This issue affects Learts Addons: from n/a through < 1.7.5.
AI Analysis
SQL Injection vulnerability in Learts Addons Plugin
Basic Information
ID
CVE-2025-59557
Source
Patchstack
Published
Oct 22, 2025 at 14:32
Modified
Oct 23, 2025 at 16:00
Affected Product
Vendor
ThemeMove
Product
Learts Addons
Version
n/a
Affected Versions
ThemeMove Learts Addons n/a
CWE Classification
AI Assessment
AI Score
9.3 / 10
AI Severity
Critical
Vendor
ThemeMove
Product
Learts Addons
Version
< 1.7.5