CVE-2025-12502

MEDIUM EPSS 14.0%

Published Nov 20, 20257mo ago · Modified Jun 17, 20261w ago

6.8 CVSS 3.1

Medium

Published Nov 20, 2025 7mo ago

Last Modified Jun 17, 2026 1w ago

Description

The attention-bar WordPress plugin through 0.7.2.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users such as administrator to perform SQL injection attacks

CVSS Details

Base Score

6.8

Exploitability

2.3

Impact

4.0

Vector string

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Attack Vector Network

Attack Complexity Low

Privileges Required High

User Interaction None

Scope Changed

Confidentiality High

Integrity None

Availability None

Threat Intelligence

EPSS Exploit Probability

14.0% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

References 1

wpscan.com https://wpscan.com/vulnerability/75e63134-4c8a-45fd-b7fc-db40644ddb8c/

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.