CVE-2025-12502 — Vulnerability intelligence
— attention-bar
Published:
- CVSS
- 6.8
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
The attention-bar WordPress plugin through 0.7.2.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users such as administrator to perform SQL injection attacks