CVE-2025-10635: Unknown Find Me On

High severity, CVSS 7.7. EPSS: 0.3% chance of exploitation in the next 30 days.

The Find Me On WordPress plugin through 2.0.9.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers and above to perform SQL injection attacks

Affected products

• Unknown Find Me On: up to and including 2.0.9.1

Published 2025-10-08. Last modified 2026-10-08.