CVE-2025-12502: Unknown Attention-Bar

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

The attention-bar WordPress plugin through 0.7.2.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users such as administrator to perform SQL injection attacks

Affected products

• Unknown Attention-Bar: up to and including 0.7.2.1

Published 2025-11-20. Last modified 2026-06-17.