CVE-2025-52717: WordPress LifterLMS plugin <= 8.0.6 - SQL Injection Vulnerability
Published Jun 27, 2025
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in chrisbadgett LifterLMS lifterlms allows SQL Injection.This issue affects LifterLMS: from n/a through <= 8.0.6.
Affected Software
3 affected components
LifterLMS LifterLMS<=8.0.6
WordPress LifterLMS<=8.0.6
LifterLMS LifterLMS Wordpress<8.0.7
Remediation
Information
Update the WordPress LifterLMS plugin to the latest available version (at least 8.0.7).
Event History
Jun 27, 2025
CVE Published
via MITRE·11:52 AM
Data Sourced
via MITRE·11:52 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-52717?
CVE-2025-52717 is classified as a critical severity SQL injection vulnerability.
2
How do I fix CVE-2025-52717?
To fix CVE-2025-52717, update LifterLMS to version 8.0.7 or later.
3
What does CVE-2025-52717 impact?
CVE-2025-52717 impacts LifterLMS versions up to and including 8.0.6.
4
Can CVE-2025-52717 allow unauthorized access?
Yes, CVE-2025-52717 can potentially allow unauthorized access to the database through SQL injection.
5
How can I know if my site is affected by CVE-2025-52717?
You can determine if your site is affected by CVE-2025-52717 by checking if it is running LifterLMS version 8.0.6 or earlier.