CVE-2025-52720: WordPress Super Store Finder Plugin <= 7.5 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super Store Finder allows SQL Injection. This issue affects Super Store Finder: from n/a through 7.5.
Other sources
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super Store Finder superstorefinder-wp allows SQL Injection.This issue affects Super Store Finder: from n/a through <= 7.5.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-52720?
CVE-2025-52720 has a high severity rating due to its SQL Injection vulnerability allowing attackers to manipulate database queries.
How do I fix CVE-2025-52720?
To fix CVE-2025-52720, update the Super Store Finder plugin to version 7.5 or later where the vulnerability has been addressed.
Who is affected by CVE-2025-52720?
CVE-2025-52720 affects users of highwarden Super Store Finder and the WordPress Super Store Finder Plugin versions up to and including 7.5.
What type of vulnerability is CVE-2025-52720?
CVE-2025-52720 is classified as an SQL Injection vulnerability, which allows unauthorized access to the database.
Can CVE-2025-52720 be exploited remotely?
Yes, CVE-2025-52720 can be remotely exploited, allowing attackers to execute arbitrary SQL commands.