What is the CVSS score of CVE-2025-39473?

CVE-2025-39473 has a CVSS 3.1 base score of 8.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of PHP are affected by CVE-2025-39473?

A path traversal vulnerability in Seofy Core (versions through 1.4.5) enables attackers to read arbitrary files from affected servers, potentially exposing sensitive data such as configuration files,…

How to fix or mitigate CVE-2025-39473?

Within 24 hours: inventory all instances of Seofy Core across your environment and isolate affected servers from internet-facing traffic if possible. Within 7 days: implement WAF rules to block path traversal patterns targeting the vulnerable endpoint, apply network segmentation to restrict access to the plugin, and disable the affected plugin functionality if business-critical operations permit. Within 30 days: migrate to an alternative solution, contact the vendor for patch availability, or conduct thorough file access audits to identify any prior exploitation.

PHP CVE-2025-39473

EUVD-2025-17511 HIGH

Path Traversal (CWE-22)

2025-06-09 audit@patchstack.com

PHP Path Traversal

8.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.1 HIGH

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Re-analysis Queued

Apr 23, 2026 - 15:42 vuln.today

cvss_changed

EUVD ID Assigned

Mar 14, 2026 - 19:21 euvd

EUVD-2025-17511

Analysis Generated

Mar 14, 2026 - 19:21 vuln.today

CVE Published

Jun 09, 2025 - 16:15 nvd

HIGH 8.1

DescriptionCVE.org

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WebGeniusLab Seofy Core allows PHP Local File Inclusion. This issue affects Seofy Core: from n/a through 1.4.5.

AnalysisAI

Path traversal vulnerability in WebGeniusLab Seofy Core (versions up to 1.4.5) that allows unauthenticated remote attackers to achieve PHP Local File Inclusion (LFI) with high complexity. The vulnerability enables attackers to read arbitrary files and potentially execute code on affected systems. No public indicators confirm active exploitation or KEV listing at this time, but the high CVSS score (8.1) and remote attack vector indicate significant risk requiring urgent patching.

Technical ContextAI

This is a CWE-22 (Improper Limitation of Pathname to Restricted Directory) vulnerability, a classic path traversal flaw where user-supplied input is not properly sanitized before being used in file path operations. In Seofy Core (a WordPress/PHP-based SEO plugin), the vulnerability likely exists in file inclusion operations where an attacker can manipulate path parameters (e.g., using '../' sequences or null bytes) to escape intended directories and access sensitive system files (/etc/passwd, wp-config.php, etc.) or include arbitrary PHP files. The medium-high attack complexity (AC:H) suggests some conditions must be met (e.g., specific server configuration, bypass of basic filtering), but the network attack vector (AV:N) and lack of authentication requirement (PR:N) make this remotely exploitable at scale. Affected CPE likely includes: cpe:2.3:a:webgeniuslab:seofy_core:*:*:*:*:*:*:*:* (versions <=1.4.5).

RemediationAI

Upgrade Seofy Core to version 1.4.6 or later (assumed patch version; verify with vendor); priority: Immediate; source: WebGeniusLab official plugin repository / vendor advisory Workaround (Temporary): Disable Seofy Core plugin until patch is available; use alternative SEO plugin with verified security record; priority: High Mitigation (Defense-in-Depth): ['Apply Web Application Firewall (WAF) rules to block path traversal patterns (../, ..\\, %2e%2e/, null bytes) in HTTP requests', 'Implement strict file upload/inclusion policies at the PHP level (disable allow_url_include, use open_basedir)', 'Monitor for suspicious file access patterns in web server logs', 'Restrict file permissions on sensitive directories (wp-config.php, wp-admin, etc.)', 'Keep WordPress core and all plugins updated']; priority: Medium-High Detection: Check web logs for requests containing ../, ..\, %2e%2e, or encoded variants targeting Seofy Core endpoints; look for 200/302 responses that may indicate successful file inclusion