CVE-2025-6782

HIGH

GoZen Forms < 1.1.5 - Unauthenticated SQL Injection via forms-id Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2025-6782. PoCs published by jFriedli.

AI-analyzed exploit summary This repository contains a functional proof-of-concept for CVE-2025-6782, demonstrating a SQL injection vulnerability via a crafted HTTP request. The exploit leverages a malformed 'forms-id' header to inject SQL code, targeting a REST endpoint in the specified software.

Description

The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the dirGZActiveForm() function in all versions up to, and including, 1.1.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

Exploits (1)

nomisec WORKING POC

by jFriedli · poc

https://github.com/jFriedli/CVE-2025-6782

View Code ZIP pw:eip

This repository contains a functional proof-of-concept for CVE-2025-6782, demonstrating a SQL injection vulnerability via a crafted HTTP request. The exploit leverages a malformed 'forms-id' header to inject SQL code, targeting a REST endpoint in the specified software.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: Gozen Forms (likely a WordPress plugin or similar)

No auth needed

Prerequisites: Access to the target endpoint · Curl or similar HTTP client

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Apr 28, 2026 Full analysis →

References (2)

Core 2

Core References

Product

https://wordpress.org/plugins/gozen-forms/

Third Party Advisory

https://www.wordfence.com/threat-intel/vulnerabilities/id/d874a041-1cd4-4ca1-85bd-4050630d8502?source=cve

Scores

CVSS v3 7.5

EPSS 0.0035

EPSS Percentile 26.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-89

Status published

Products (2)

optinlyhq/GoZen Forms < 1.1.5

optinlyhq/gozen_forms < 1.1.5

Published Jul 04, 2025

Tracked Since Feb 18, 2026