Lucene search
+L

9 matches found

Patchstack
Patchstack
•added 2025/11/25 12:46 a.m.•14 views

WordPress Attention Bar plugin <= 0.7.2.1 - Authenticated (Contributor+) SQL Injection vulnerability

Authenticated Contributor+ SQL Injection vulnerability discovered by WPScan in WordPress Plugin Attention Bar versions = 0.7.2.1...

6.8CVSS8.1AI score0.00266EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/11/21 6:28 a.m.•21 views

CVE-2025-12502

The attention-bar WordPress plugin through 0.7.2.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users such as administrator to perform SQL injection attacks...

6.8CVSS7.9AI score0.00266EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/20 3:17 p.m.•27 views

CVE-2025-12502

The attention-bar WordPress plugin through 0.7.2.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users such as administrator to perform SQL injection attacks...

6.8CVSS0.00266EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/20 6:00 a.m.•8 views

CVE-2025-12502 Attention Bar <= 0.7.2.1 - Admin+ SQLi

The attention-bar WordPress plugin through 0.7.2.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users such as administrator to perform SQL injection attacks...

7.4AI score0.00266EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/20 6:00 a.m.•34 views

CVE-2025-12502

The attention-bar WordPress plugin, affecting versions 0.7.2.1 and earlier , is vulnerable to an SQL injection attack. The root cause is the failure to properly sanitize and escape a parameter before incorporating it into a SQL statement. This flaw allows users with high privileges, such as admin...

7.4AI score0.00266EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/20 6:00 a.m.•29 views

CVE-2025-12502 Attention Bar <= 0.7.2.1 - Admin+ SQLi

The attention-bar WordPress plugin through 0.7.2.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users such as administrator to perform SQL injection attacks...

0.00266EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/20 12:00 a.m.•1 views

CVE-2025-12502: Undefined Security Weakness

The attention-bar WordPress plugin through 0.7.2.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users such as administrator to perform SQL injection attacks...

6.8CVSS5.8AI score0.00266EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/20 12:00 a.m.•15 views

PT-2025-47556

The attention-bar WordPress plugin through 0.7.2.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users such as administrator to perform SQL injection attacks...

7.9AI score0.00266EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/20 12:00 a.m.•14 views

WordPress plugin Attention Bar 安全漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability exists in...

6.8CVSS7.5AI score0.00266EPSS
SaveExploits0References1
Rows per page
Query Builder