CVE-2021-25109

2.7 lowEPSS 0.8%

Low (2.7) in futuriowp futurio extra. EPSS 0.8% chance of exploitation in the next 30 days.

The Futurio Extra WordPress plugin before 1.6.3 is affected by a SQL Injection vulnerability that could be used by high privilege users to extract data from the database as well as used to perform Cross-Site Scripting (XSS) against logged in admins by making send open a malicious link.

Severity

CVSS 3.1

2.7 low

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2022-02-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

futuriowp:futurio_extra

References

https://wpscan.com/vulnerability/36261af9-3b34-4563-af3c-c9e54ae2d581
https://wpscan.com/vulnerability/36261af9-3b34-4563-af3c-c9e54ae2d581

Check your stack JSON