SQL Injection Vulnerability in Visualizer: Tables and Charts Manager for WordPress Plugin

CVE-2025-12483

What is CVE-2025-12483?

The Visualizer plugin for WordPress is susceptible to SQL Injection due to improper escaping of the 'query' parameter in versions up to 3.11.12. This flaw allows authenticated users with Contributor access or higher to manipulate existing SQL queries, potentially leading to unauthorized access to sensitive database information. The vulnerability was addressed in version 3.11.14, which mitigates exploitation by updating user-level requirements for certain operations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References