← Back

Db Access

db-access

Vendor: Jimbob1953 • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Jimbob1953
1Db Access
Jan 30, 2026
Dec 2, 2025
N/A· v4
7.7 HIGH· v3
N/A· v2
The db-access WordPress plugin through 0.8.7 does not have authorization in an AJAX action, allowing any authenticated users, such as subscriber to perform SQLI attacks