WordPress security by component

Wp cycle text announcement

Plugin description

Wp cycle text announcement is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Oct 03, 2025; the highest CVE/CNA score is 6.5.

Plugin slug: wp-cycle-text-announcement

Latest vulnerability

CVE-2025-9198: Wp cycle text announcement: SQL injection

Wp cycle text announcement is affected by SQL injection. Exploitation requires at least contributor-level access. A successful request can alter database queries and expose or modify WordPress data.

PublishedOct 03, 2025

Safe version guidanceSee mitigation notes

		Safe version
Oct 03, 2025	CVE-2025-9198 Wp cycle text announcement: SQL injection Wp cycle text announcement is affected by SQL injection. Exploitation requires at least contributor-level access. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE6.5 NVDPending