CVE-2025-68053: WordPress xPromoter plugin <= 1.3.4 - SQL Injection vulnerability
Published Dec 16, 2025
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup xPromoter topbarpromoter allows Blind SQL Injection.This issue affects xPromoter: from n/a through <= 1.3.4.
Affected Software
2 affected components
LambertGroup xPromoter<=1.3.4
wordpress/xpromoter<=1.3.4
Event History
Dec 16, 2025
CVE Published
via MITRE·08:12 AM
Data Sourced
via MITRE·08:12 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-68053?
CVE-2025-68053 is classified as a high-severity vulnerability due to its potential for SQL injection attacks.
2
How do I fix CVE-2025-68053?
To fix CVE-2025-68053, update the LambertGroup xPromoter plugin to a version higher than 1.3.4.
3
What type of vulnerability is CVE-2025-68053?
CVE-2025-68053 is an SQL injection vulnerability that allows blind SQL injection attacks.
4
Which versions of xPromoter are affected by CVE-2025-68053?
CVE-2025-68053 affects versions of xPromoter from n/a to 1.3.4 inclusive.
5
What impact does CVE-2025-68053 have on my application?
CVE-2025-68053 may allow attackers to execute arbitrary SQL queries, which could lead to data leakage or unauthorized access.