Vulnerabilities
CVE-2025-13001 - Donation <= 1.0 - admin+ sqli
CVE ID : CVE-2025-13001 Published : Dec. 2, 2025, 6:15 a.m. | 1 hour, 45 minutes ago Description : The donation WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users, such as admin to perform SQL injection attacks Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE Details
Affected Product:
WordPress
Impact:
SQL injection
Source: Telegram CVE Monitor