CVE-2025-32120: Edanzer Easy Query – Wp Query Builder

High severity, CVSS 7.6. EPSS: 0.6% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in edanzer Easy Query – WP Query Builder easy-query allows Blind SQL Injection.This issue affects Easy Query – WP Query Builder: from n/a through <= 2.0.4.

Affected products

• Edanzer Easy Query – Wp Query Builder: up to and including 2.0.4

Published 2025-04-04. Last modified 2026-06-17.