Skip to content
Sign in
8.6 High

CVE-2025-14124 The Team WordPress plugin before 5.0.11 does not properly sanitize and escape a parameter before using it in a SQL…

Description

The Team WordPress plugin before 5.0.11 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

Affected products and versions

Product Affected versions Fixed in
Team 5.0 earliest → < 5.0.11 5.0.11

Other CVEs of Team

The 2 CVEs of Team →
CVE-2024-9236 The Team WordPress plugin before 4.4.2 does not sanitise and escape some of its settings, which could allow high… 4.8 Medium
Track this CVE