The vulnerability CVE-2025-52720 in highwarden Super Store Finder arises from improper neutralization of special elements used in SQL commands, enabling SQL Injection attacks. This affects versions up to 7.5 of the plugin. The CVSS 3.1 score of 9.3 reflects that the vulnerability is remotely exploitable without privileges or user interaction, can compromise confidentiality, and causes limited availability impact. No vendor advisory or patch information is currently available, and the product is not a cloud service.

Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the backend database, potentially leading to disclosure of sensitive information (confidentiality impact) and limited disruption of service (availability impact). Integrity impact is not indicated. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or restricting access to the affected plugin to mitigate risk. Monitor vendor channels for updates and apply patches promptly once released.