CVE-2025-14124 Scanner
CVE-2025-14124 Scanner - SQL Injection vulnerability in Team WordPress Plugin (TLP Team)
Used 2.4k times · 3.4k assets checked · domain, subdomain, ipv4
CVE
CVE-2025-14124
8.6
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description
The Team WordPress plugin before 5.0.11 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
team
Updated Oct 12, 2026View on NVD →
S4E scanner
CVE history: team
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →