PT-2025-39004 · WordPress · Wp Tabber Widget

·

CVE-2025-53468

·

Published

2025-09-22

·

Updated

2025-09-22

CVSS v3.1

8.5

High

VectorAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
Name of the Vulnerable Software and Affected Versions Wp tabber widget versions through 4.0
Description The Wp tabber widget contains a flaw related to improper neutralization of special elements within SQL commands, leading to a potential SQL Injection issue. This could allow for unauthorized access or manipulation of the database. The vulnerability exists due to insufficient sanitization of input data used in SQL queries. The affected component is susceptible to exploitation through crafted input.
Recommendations Update Wp tabber widget to a version later than 4.0.

Fix

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-53468

Affected Products

Wp Tabber Widget