Db Access

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-13000 Dec 02, 06:15 HIGH POC This Week

The db-access WordPress plugin through 0.8.7 does not have authorization in an AJAX action, allowing any authenticated users, such as subscriber to perform SQLI attacks

PHP WordPress SQLi Db Access

NVD WPScan

CVSS 3.1

7.7

EPSS

0.0%

CVE-2025-13000

EPSS 0% CVSS 7.7

HIGH POC This Week

The db-access WordPress plugin through 0.8.7 does not have authorization in an AJAX action, allowing any authenticated users, such as subscriber to perform SQLI attacks

PHP WordPress SQLi +1

NVD WPScan