Db Access
1 CVEs
product
Monthly
The db-access WordPress plugin through 0.8.7 does not have authorization in an AJAX action, allowing any authenticated users, such as subscriber to perform SQLI attacks
SQLi
WordPress
Db Access
PHP
NVD
WPScan
CVSS 3.1
7.7
EPSS
0.0%
CVE-2025-13000
EPSS 0%
CVSS 7.7
HIGH
POC
This Week
The db-access WordPress plugin through 0.8.7 does not have authorization in an AJAX action, allowing any authenticated users, such as subscriber to perform SQLI attacks
SQLi
WordPress
Db Access
+1
NVD
WPScan