CVE-2025-12061 — Tax Service Electronic HDM < 1.2.1 - Unauthenticated Arbitrary SQL Execution

CVE-2025-12061

Tax Service Electronic HDM < 1.2.1 - Unauthenticated Arbitrary SQL Execution PUBLISHED

Description (CNA)

The TAX SERVICE Electronic HDM WordPress plugin before 1.2.1 does not authorization and CSRF checks in an AJAX action, allowing unauthenticated users to import and execute arbitrary SQL statements

Affected (CNA)

Vendor / product	Versions
Unknown / TAX SERVICE Electronic HDM	affected 0 before 1.2.1

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/1015dd69-faa5-4008-8884-f497ff980ed3/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.