Unrated

WordPress LifterLMS plugin <= 8.0.6 - SQL Injection Vulnerability

CVE-2025-52717 First seen on SecPulse Jun 27, 2025

Original description The description as published by the source.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in chrisbadgett LifterLMS lifterlms allows SQL Injection.This issue affects LifterLMS: from n/a through <= 8.0.6.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
advisory patchstack.com
web wordpress.org

Key facts

Severity: Unrated
Published: Jun 27, 2025
First seen on SecPulse: Jun 27, 2025
CWE: CWE-89

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:10