CVE-2025-14124 in Team Plugininformación

Resumen

por MITRE • 2026-01-05

The Team WordPress plugin before 5.0.11 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

WPScan

Reservar

2025-12-05

Divulgación

2026-01-05

Moderación

aceptado

Artículo

VDB-339507

CPE

listo

EPSS

0.01560

KEV

no

Actividades

muy bajo

Sector

Hostingprovider

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2025-14124
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-14124
CVE Detailshttps://www.cvedetails.com/cve/CVE-2025-14124/

◂ AnteriorVisión De ConjuntoPróximo ▸

Interested in the pricing of exploits?

See the underground prices here!