High severity8.6NVD Advisory· Published Jan 5, 2026· Updated Jun 17, 2026
CVE-2025-14124
CVE-2025-14124
Description
The Team WordPress plugin before 5.0.11 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<5.0.11+ 1 more
- (no CPE)range: <5.0.11
- (no CPE)range: <5.0.11
Package: https://wordpress.org/plugins/team
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.