CVE-2025-68865: WordPress Infility Global plugin <= 2.15.11 - SQL Injection vulnerability
Published Jan 5, 2026
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Infility Infility Global infility-global allows SQL Injection.This issue affects Infility Global: from n/a through <= 2.15.06.
Affected Software
1 affected component
Infility Infility Global<=2.15.06
Event History
Jan 5, 2026
CVE Published
via MITRE·10:44 AM
Data Sourced
via MITRE·10:44 AM
DescriptionWeakness
Data Sourced
via NVD·11:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-68865?
CVE-2025-68865 is classified as a high severity SQL Injection vulnerability affecting Infility Global.
2
How can I fix CVE-2025-68865?
To fix CVE-2025-68865, update Infility Global to a patched version beyond 2.14.48.
3
Which versions of Infility Global are affected by CVE-2025-68865?
CVE-2025-68865 affects Infility Global versions up to and including 2.14.48.
4
What exploit types are associated with CVE-2025-68865?
CVE-2025-68865 is associated with SQL injection attacks that can lead to unauthorized database access.
5
Is CVE-2025-68865 specific to any platforms?
CVE-2025-68865 is specific to the Infility Global plugin for WordPress.