Captivateaudio vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Captivateaudio products: 2 record(s), with severity, exploitation and fixes.

Captivate Sync 2

Exploited only (KEV) →

CVE-2025-68570 High · 7.6 CWE-89 Dec 24, 2025

WordPress Captivate Sync plugin <= 3.2.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n/a through <= 3.2.2.

CVE-2025-60221 Critical · 9.8 CWE-502 Oct 22, 2025

WordPress Captivate Sync Plugin <= 3.0.3 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Object Injection.This issue affects Captivate Sync: from n/a through <= 3.0.3.