Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2025-12061

Tax Service Electronic HDM < 1.2.1 - Unauthenticated Arbitrary SQL Execution

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The TAX SERVICE Electronic HDM WordPress plugin before 1.2.1 does not authorization and CSRF checks in an AJAX action, allowing unauthenticated users to import and execute arbitrary SQL statements

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown TAX SERVICE Electronic HDM

Default version status: unaffected

  • 0 to < 1.2.1affected

References