CVE-2025-11501 | Dynamically Display Posts Plugin up to 1.1 on WordPress tax_query sql injection

October 15, 2025 Yanac

A vulnerability classified as critical has been found in Dynamically Display Posts Plugin up to 1.1 on WordPress. The affected element is an unknown function. The manipulation of the argument tax_query leads to sql injection.

This vulnerability is referenced as CVE-2025-11501. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More