Exertio Framework vulnerabilities

2 known vulnerabilities in Exertio Framework from Scriptsbundle. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.5 High severity

  Exertio Framework: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-49402Aug 28, 2025Scriptsbundle

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in scriptsbundle Exertio Framework exertio-framework allows Blind SQL Injection.This issue affects Exertio Framework: from n/a through <= 1.3.3.

• 8.1 High severity

  Exertio Framework: Unverified Password Change

  CVE-2024-13373Mar 1, 2025Scriptsbundle

  The Exertio Framework plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.1. This is due to the plugin not properly validating a user's identity prior to updating their password through the