Jimbob1953 Db-access vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Jimbob1953 Db-access: 1 record(s), with affected versions and fixes.cpe:2.3:a:jimbob1953:db-access
CVE-2025-13000
High · 7.7
CWE-89 Dec 2, 2025
DB Access <= 0.8.7 - Subscriber+ SQLi
The db-access WordPress plugin through 0.8.7 does not have authorization in an AJAX action, allowing any authenticated users, such as subscriber to perform SQLI attacks