Miniorange Custom API For WP vulnerabilities

2 vulnerabilities

Known vulnerabilities in Miniorange Custom API For WP, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.3CVE-2025-54048miniorangecustom api for wp+1
EPSS score
0.42%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in miniOrange Custom API for WP custom-api-for-wp allows SQL Injection.This issue affects Custom API for WP: from n/a through <= 4.2.2.9.9CVE-2025-54049miniorangecustom api for wp+1
EPSS score
0.41%
Incorrect Privilege Assignment vulnerability in miniOrange Custom API for WP custom-api-for-wp allows Privilege Escalation.This issue affects Custom API for WP: from n/a through <= 4.2.2.