CVE-2025-68561: WordPress AutomatorWP plugin <= 5.2.4 - SQL Injection vulnerability
Published Dec 23, 2025
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia AutomatorWP automatorwp allows SQL Injection.This issue affects AutomatorWP: from n/a through <= 5.2.4.
Affected Software
1 affected component
Ruben Garcia AutomatorWP<=5.2.4
Remediation
Information
Update the WordPress AutomatorWP plugin to the latest available version (at least 5.2.5).
Event History
Dec 23, 2025
CVE Published
via MITRE·11:34 AM
Data Sourced
via MITRE·11:34 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-68561?
CVE-2025-68561 is classified as a medium severity SQL Injection vulnerability.
2
How do I fix CVE-2025-68561?
To fix CVE-2025-68561, update AutomatorWP to version 5.2.5 or later.
3
What types of attacks can CVE-2025-68561 enable?
CVE-2025-68561 can allow attackers to execute arbitrary SQL queries on the database.
4
Which versions of AutomatorWP are affected by CVE-2025-68561?
CVE-2025-68561 affects AutomatorWP versions from n/a through 5.2.4.
5
Is my website vulnerable if I am running AutomatorWP 5.2.4 or earlier?
Yes, if you are running AutomatorWP version 5.2.4 or earlier, your website is vulnerable to CVE-2025-68561.