high8.6
CVE-2025-12061
The TAX SERVICE Electronic HDM WordPress plugin before 1.2.1 does not authorization and CSRF checks in an AJAX action, allowing unauthenticated users to import…
Impact
The TAX SERVICE Electronic HDM WordPress plugin before 1.2.1 does not authorization and CSRF checks in an AJAX action, allowing unauthenticated users to import and execute arbitrary SQL statements
Affected products
| Product | Affected versions |
|---|---|
| TAX SERVICE Electronic HDM WordPress Plugin | before 1.2.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.