Medium severity6.8NVD Advisory· Published Nov 20, 2025· Updated Apr 15, 2026
CVE-2025-12502
CVE-2025-12502
Description
The attention-bar WordPress plugin through 0.7.2.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users such as administrator to perform SQL injection attacks
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.