{"id":"CVE-2025-47567","aliases":["EUVD-2025-15507","GHSA-c8fv-rjf6-9q8v"],"status":"published","title":"WordPress Video Player \u0026 FullScreen Video Background plugin \u003c= 2.4.1 - SQL Injection vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Video Player \u0026 FullScreen Video Background universal-video-player-and-bg allows Blind SQL Injection.This issue affects Video Player \u0026 FullScreen Video Background: from n/a through \u003c= 2.4.1.","severity":{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00435,"percentile":0.38176,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2025-05-16T15:45:18Z","modified":"2026-06-17T09:28:19Z","products":[{"vendor":"lambertgroup","product":"video player \u0026 fullscreen video background"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/universal-video-player-and-bg/vulnerability/wordpress-video-player-fullscreen-video-background-plugin-2-4-1-sql-injection-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47567"},{"url":"https://patchstack.com/database/wordpress/plugin/universal-video-player-and-bg/vulnerability/wordpress-video-player-fullscreen-video-background-plugin-2-4-1-sql-injection-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-c8fv-rjf6-9q8v"}],"sources":{"cve":[{"id":"CVE-2025-47567","title":"WordPress Video Player \u0026 FullScreen Video Background plugin \u003c= 2.4.1 - SQL Injection vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Video Player \u0026 FullScreen Video Background universal-video-player-and-bg allows Blind SQL Injection.This issue affects Video Player \u0026 FullScreen Video Background: from n/a through \u003c= 2.4.1.","status":"published","published":"2025-05-16T15:45:18.03Z","modified":"2026-04-28T16:12:45.044Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:32:26.320248Z"}],"euvd":[{"id":"EUVD-2025-15507","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Video Player \u0026 FullScreen Video Background universal-video-player-and-bg allows Blind SQL Injection.This issue affects Video Player \u0026 FullScreen Video Background: from n/a through \u003c= 2.4.1.","status":"published","published":"2025-05-16T15:45:18Z","modified":"2026-04-28T16:12:45Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","level":"high"}],"updated_at":"2026-11-02T19:05:41.660258Z"}],"ghsa":[{"id":"GHSA-c8fv-rjf6-9q8v","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Video Player \u0026 FullScreen Video Background allows Blind SQL Injection. This issue affects Video Player \u0026 FullScreen Video Background: from n/a through 2.4.1.","status":"published","published":"2025-05-16T18:31:08Z","modified":"2025-05-16T18:31:16Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:02:19.907667Z"}],"nvd":[{"id":"CVE-2025-47567","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Video Player \u0026 FullScreen Video Background universal-video-player-and-bg allows Blind SQL Injection.This issue affects Video Player \u0026 FullScreen Video Background: from n/a through \u003c= 2.4.1.","status":"published","published":"2025-05-16T16:15:42.82Z","modified":"2026-06-17T09:28:19.62Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:11:08.321805Z"}]}}