CVE-2025-6783

HIGH

GoZen Forms <= 1.1.5 - Unauthenticated SQL Injection via forms-id Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2025-6783. PoCs published by jFriedli.

AI-analyzed exploit summary This repository contains a functional proof-of-concept for CVE-2025-6783, demonstrating a SQL injection vulnerability via a crafted HTTP header. The exploit injects an always-true condition into the WHERE clause, bypassing authentication or data restrictions.

Description

The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the emdedSc() function in all versions up to, and including, 1.1.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

Exploits (1)

nomisec WORKING POC

by jFriedli · poc

https://github.com/jFriedli/CVE-2025-6783

View Code ZIP pw:eip

This repository contains a functional proof-of-concept for CVE-2025-6783, demonstrating a SQL injection vulnerability via a crafted HTTP header. The exploit injects an always-true condition into the WHERE clause, bypassing authentication or data restrictions.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: Gozen Forms (WordPress plugin)

No auth needed

Prerequisites: Access to the target WordPress site with Gozen Forms plugin installed · REST API endpoint exposed

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Apr 28, 2026 Full analysis →

References (2)

Core 2

Core References

Product

https://wordpress.org/plugins/gozen-forms/

Third Party Advisory

https://www.wordfence.com/threat-intel/vulnerabilities/id/784998a7-550d-4299-9995-af01e5ee1d21?source=cve

Scores

CVSS v3 7.5

EPSS 0.0036

EPSS Percentile 27.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-89

Status published

Products (2)

optinlyhq/GoZen Forms < 1.1.5

optinlyhq/gozen_forms < 1.1.5

Published Jul 04, 2025

Tracked Since Feb 18, 2026