Description

The TAX SERVICE Electronic HDM WordPress plugin before 1.2.1 does not authorization and CSRF checks in an AJAX action, allowing unauthenticated users to import and execute arbitrary SQL statements

INFO

Published Date :

2025-11-26T06:00:08.258Z

Last Modified :

2025-11-26T14:39:39.549Z

Source :

WPScan
AFFECTED PRODUCTS

The following products are affected by CVE-2025-12061 vulnerability.

No data.

REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-12061.

CVSS Vulnerability Scoring System