← Database

CVE-2025-13000

HIGH CVSS: 7.7 Published: 2025-12-02 Modified: 2026-06-17

Description

The db-access WordPress plugin through 0.8.7 does not have authorization in an AJAX action, allowing any authenticated users, such as subscriber to perform SQLI attacks

Affected Platforms

Jimbob1953 Db-Access

Weakness Type

CWE-89

References