Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in don-themes Riode Core riode-core allows Blind SQL Injectio…

A blind SQL injection vulnerability has been identified in the don-themes Riode Core WordPress plugin. The vulnerability is classified as CVE-2025-69338 and affects all versions of Riode Core from an unknown starting version through version 1.6.26. The issue stems from improper neutralization of special elements used in SQL commands, allowing attackers to perform blind SQL injection attacks. This vulnerability could potentially allow unauthorized database access and data extraction. Users of the affected plugin versions should update to a patched version as soon as it becomes available.