7.7
Élevée
CVE-2025-13000 The db-access WordPress plugin through 0.8.7 does not have authorization in an AJAX action, allowing any authenticated…
Description
The db-access WordPress plugin through 0.8.7 does not have authorization in an AJAX action, allowing any authenticated users, such as subscriber to perform SQLI attacks
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| db-access 0.8 | premières → 0.8.7 | Pas de correctif indiqué |