CVE-2025-13000

The db-access WordPress plugin (versions through 0.8.7 ) contains a SQL injection vulnerability caused by a lack of proper authorization in an AJAX action . This flaw allows any authenticated user, including those with low-level subscriber privileges, to send malicious SQL commands. Successful ex...

CVE-2025-13000 DB Access <= 0.8.7 - Subscriber+ SQLi

The db-access WordPress plugin through 0.8.7 does not have authorization in an AJAX action, allowing any authenticated users, such as subscriber to perform SQLI attacks...