CVE-2025-47567: WordPress Video Player & FullScreen Video Background plugin <= 2.4.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Video Player & FullScreen Video Background allows Blind SQL Injection. This issue affects Video Player & FullScreen Video Background: from n/a through 2.4.1.
Other sources
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Video Player & FullScreen Video Background universal-video-player-and-bg allows Blind SQL Injection.This issue affects Video Player & FullScreen Video Background: from n/a through <= 2.4.1.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47567?
CVE-2025-47567 is classified as a high severity SQL Injection vulnerability.
How do I fix CVE-2025-47567?
To fix CVE-2025-47567, you should update the LambertGroup Video Player & FullScreen Video Background plugin to version 2.4.2 or later.
What platforms are affected by CVE-2025-47567?
CVE-2025-47567 affects the LambertGroup Video Player & FullScreen Video Background plugin on WordPress versions up to 2.4.1.
What type of attack is associated with CVE-2025-47567?
CVE-2025-47567 allows for Blind SQL Injection attacks, which can potentially lead to unauthorized data access.
Is CVE-2025-47567 being actively exploited?
As of now, there are no reports indicating active exploitation of CVE-2025-47567, but it is advisable to patch the vulnerability promptly.