PT-2025-26425 · Unknown · Thanhtungtnt Video List Manager

Chu The Anh · Published 2025-06-20 · Updated 2025-06-20 · CVE-2025-52821

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions: thanhtungtnt Video List Manager versions through 1.7

Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows for SQL Injection, potentially enabling cyber threats.

Recommendations: For thanhtungtnt Video List Manager versions through 1.7, update to a version that is not affected by this issue. As a temporary workaround, consider restricting access to sensitive database elements to minimize the risk of exploitation.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-52821

Affected Products

Thanhtungtnt Video List Manager

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-52821 · Security Note
• https://twitter.com/CveFindCom/status/1936086856149381218 · Twitter Post
• https://t.me/latest_high_impact_cve/2741 · Telegram Post
• https://patchstack.com/database/Wordpress/Plugin/video-list-manager/vulnerability/wordpress-video-list-manager-plugin-1-7-sql-injection-vulnerability?_s_id=cve · Note
• https://t.me/cvetracker/26671 · Telegram Post
• https://patchstack.com/database/wordpress/plugin/video-list-manager/vulnerability/wordpress-video-list-manager-plugin-1-7-sql-injection-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/1936131341042569249 · Twitter Post
• https://twitter.com/CVEnew/status/1936103969677271132 · Twitter Post