CVE-2025-14770 | Shipping Rate By Cities Plugin up to 2.0.0 on WordPress city sql injection

January 13, 2026 Yanac

A vulnerability was found in Shipping Rate By Cities Plugin up to 2.0.0 on WordPress. It has been rated as critical. Affected by this vulnerability is an unknown functionality. This manipulation of the argument city causes sql injection.

The identification of this vulnerability is CVE-2025-14770. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More