PT-2025-49894 · Lambertgroup · Accordion Slider Pro

Published 2025-12-09 · Updated 2025-12-15 · CVE-2025-67518

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions LambertGroup Accordion Slider PRO versions through 1.2

Description The software contains a flaw related to improper handling of special characters within SQL commands, potentially leading to SQL Injection. This could allow an attacker to manipulate database queries. The affected component is accordion slider pro. This issue allows for Blind SQL Injection.

Recommendations Versions prior to or equal to 1.2 should be updated. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-67518

Affected Products

Accordion Slider Pro

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-67518 · Security Note
• https://twitter.com/CVEnew/status/2000617575495970929 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/accordion_slider_pro/vulnerability/wordpress-accordion-slider-pro-plugin-1-2-sql-injection-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/accordion_slider_pro/vulnerability/wordpress-accordion-slider-pro-plugin-1-2-sql-injection-vulnerability?_s_id=cve · Note