Aller au contenu
Se connecter
8.6 Élevée

CVE-2025-14124 The Team WordPress plugin before 5.0.11 does not properly sanitize and escape a parameter before using it in a SQL…

Description

The Team WordPress plugin before 5.0.11 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

Produits et versions touchés

Produit Versions touchées Corrigé en
Team 5.0 premières → < 5.0.11 5.0.11

Autres CVE de Team

Les 2 CVE de Team →
CVE-2024-9236 The Team WordPress plugin before 4.4.2 does not sanitise and escape some of its settings, which could allow high… 4.8 Moyenne
Suivre cette CVE