CVE-2025-5017 | catalyst2020 Catalyst Connect Zoho CRM Client Portal Plugin up to 2.2.0 on WordPress SQL Query uid sql injection

July 11, 2026 Yanac

A vulnerability labeled as problematic has been found in catalyst2020 Catalyst Connect Zoho CRM Client Portal Plugin up to 2.2.0 on WordPress. The impacted element is an unknown function of the component SQL Query Handler. Executing a manipulation of the argument uid can lead to sql injection.

This vulnerability appears as CVE-2025-5017. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More