CVE-2025-68056: WordPress LBG Zoominoutslider plugin <= 5.4.4 - SQL Injection vulnerability
Published Dec 16, 2025
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LBG Zoominoutslider lbgzoominoutslider allows SQL Injection.This issue affects LBG Zoominoutslider: from n/a through <= 5.4.4.
Affected Software
1 affected component
LambertGroup LBG Zoominoutslider<=5.4.4
Event History
Dec 16, 2025
CVE Published
via MITRE·08:13 AM
Data Sourced
via MITRE·08:13 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-68056?
CVE-2025-68056 is classified as a medium severity SQL Injection vulnerability in LBG Zoominoutslider.
2
How do I fix CVE-2025-68056?
To fix CVE-2025-68056, update LBG Zoominoutslider to version 5.4.6 or later.
3
What are the consequences of CVE-2025-68056?
Exploitation of CVE-2025-68056 can allow an attacker to execute arbitrary SQL commands on the database.
4
Which versions are affected by CVE-2025-68056?
CVE-2025-68056 affects all versions of LBG Zoominoutslider up to and including 5.4.5.
5
Is CVE-2025-68056 specific to WordPress?
Yes, CVE-2025-68056 specifically affects the LBG Zoominoutslider plugin used on WordPress.