PT-2025-52743 · WordPress · Automatorwp

Nguyen Kim Sang · Published 2025-12-23 · Updated 2025-12-28 · CVE-2025-68561

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions AutomatorWP versions through 5.2.4

Description Improper neutralization of special elements used in an SQL command allows for SQL injection. The issue affects the AutomatorWP plugin.

Recommendations Update AutomatorWP to a version later than 5.2.4.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-68561

Affected Products

Automatorwp

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-68561 · Security Note
• https://patchstack.com/database/wordpress/plugin/automatorwp/vulnerability/wordpress-automatorwp-plugin-5-2-4-sql-injection-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/automatorwp/vulnerability/wordpress-automatorwp-plugin-5-2-4-sql-injection-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/wordpress/plugin/automatorwp/vulnerability/wordpress-automatorwp-plugin-5-2-4-sql-injection-vulnerability?_s_id=cve · Note
• https://twitter.com/cracbot/status/2005232320480239995 · Twitter Post
• https://t.me/CVEtracker/40486 · Telegram Post