How to: CVE-2025-14124 (2026-01-05)
```
The Team  WordPress plugin before 5.0.11 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.
```
- [hyunchiya/CVE-2025-14124](https://github.com/hyunchiya/CVE-2025-14124)