CVE-2025-6782

CVE-2025-6782 describes a high-severity SQL Injection vulnerability affecting the GoZen Forms WordPress plugin, versions up to and including 1.1.5. This flaw, stemming from insufficient input sanitization, allows unauthenticated attackers to extract sensitive database information by injecting malicious SQL queries. The vulnerability has a CVSS score of 7.5 (High) due to its network-based attack vector, low attack complexity, and high impact on confidentiality. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has received minimal community discussion or media coverage.