CVE-2025-59473: Expressionengine

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

SQL Injection vulnerability in the Structure for Admin authenticated user

Affected products

• Expressionengine Expressionengine: from 7.0.0, before 7.5.14 (fixed in 7.5.14)

Published 2026-01-26. Last modified 2026-06-17.