7.7
High
CVE-2025-13000 The db-access WordPress plugin through 0.8.7 does not have authorization in an AJAX action, allowing any authenticated…
Description
The db-access WordPress plugin through 0.8.7 does not have authorization in an AJAX action, allowing any authenticated users, such as subscriber to perform SQLI attacks
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| db-access 0.8 | earliest → 0.8.7 | No fix stated |