high7.7
CVE-2025-13000
The db-access WordPress plugin through 0.8.7 does not have authorization in an AJAX action, allowing any authenticated users, such as subscriber to perform SQL…
Impact
The db-access WordPress plugin through 0.8.7 does not have authorization in an AJAX action, allowing any authenticated users, such as subscriber to perform SQLI attacks
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jimbob1953 | Db-Access | through 0.8.7 |