PT-2025-39004 · WordPress · Wp Tabber Widget

Peter Thaleikis · Published 2025-09-22 · Updated 2025-09-22 · CVE-2025-53468

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions Wp tabber widget versions through 4.0

Description The Wp tabber widget contains a flaw related to improper neutralization of special elements within SQL commands, leading to a potential SQL Injection issue. This could allow for unauthorized access or manipulation of the database. The vulnerability exists due to insufficient sanitization of input data used in SQL queries. The affected component is susceptible to exploitation through crafted input.

Recommendations Update Wp tabber widget to a version later than 4.0.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-53468

Affected Products

Wp Tabber Widget

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-53468 · Security Note
• https://patchstack.com/database/wordpress/plugin/wp-tabber-widget/vulnerability/wordpress-wp-tabber-widget-plugin-4-0-sql-injection-vulnerability?_s_id=cve · Note
• https://twitter.com/CveFindCom/status/1970204040437920068 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/wp-tabber-widget/vulnerability/wordpress-wp-tabber-widget-plugin-4-0-sql-injection-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1970207990042210681 · Twitter Post