PT-2025-51447 · Lambertgroup · Lbg Zoominoutslider

Published 2025-12-16 · Updated 2025-12-17 · CVE-2025-68056

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions LambertGroup LBG Zoominoutslider versions through 5.4.5

Description A flaw exists in LambertGroup LBG Zoominoutslider that allows for SQL Injection. This occurs due to improper neutralization of special elements used in an SQL command. The issue affects the lbg zoominoutslider component.

Recommendations Update LambertGroup LBG Zoominoutslider to a version later than 5.4.5.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-68056

Affected Products

Lbg Zoominoutslider

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-68056 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/lbg_zoominoutslider/vulnerability/wordpress-lbg-zoominoutslider-plugin-5-4-5-sql-injection-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2001365752629088682 · Twitter Post
• https://vdp.patchstack.com/database/Wordpress/Plugin/lbg_zoominoutslider/vulnerability/wordpress-lbg-zoominoutslider-plugin-5-4-5-sql-injection-vulnerability?_s_id=cve · Note