EUVD-2025-19364Severity by source
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Requires administrative access (PR:H) and is remotely exploitable (AV:N) with low complexity.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
3DescriptionCVE.org
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in gioni Plugin Inspector allows Path Traversal. This issue affects Plugin Inspector: from n/a through 1.5.
AnalysisAI
Arbitrary file read vulnerability in the Plugin Inspector WordPress plugin up to version 1.5 allows authenticated administrators to read arbitrary files on the server via a path traversal attack. The vulnerability requires high privileges but can expose sensitive configuration and data. No active exploitation or public exploit code has been observed, and the EPSS score indicates a low probability of widespread exploitation.
Technical ContextAI
The vulnerability is a classic path traversal (CWE-22) in the Plugin Inspector plugin for WordPress. Insufficient sanitization of user-supplied file paths permits directory traversal sequences (e.g., '../') to escape the intended directory, enabling unauthorized file reads. The affected product is a niche WordPress plugin (identified as Plugin Inspector by gioni) and the issue stems from improper limitation of a pathname to a restricted directory, a common flaw in PHP-based web applications where user input is used directly in file operations without rigorous validation.
RemediationAI
No official vendor patch has been identified at the time of analysis. Immediate mitigation recommendations include disabling or removing the Plugin Inspector plugin entirely. If removal is not feasible, restrict access to the plugin's functionality to a minimal set of trusted administrators, understanding that this does not eliminate the path traversal risk. Monitor the Patchstack advisory for a future patch release.
More in Wordpress Plugin
View allThe Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1
The Hash Form - Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing fil
Authentication bypass in the LiteSpeed Cache WordPress plugin (versions prior to 6.5.0.1) allows unauthenticated remote
The Simple File List plugin for WordPress through version 4.2.2 contains an unauthenticated remote code execution vulner
The SureTriggers WordPress plugin through version 1.0.82 contains a privilege escalation vulnerability that allows unaut
The Ninja Forms plugin before 2.9.42.1 for WordPress allows remote attackers to conduct PHP object injection attacks via
The Business Directory Plugin - Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based
SQL injection in the NotificationX WordPress plugin (versions up to and including 2.8.2) allows unauthenticated remote a
The POST SMTP Mailer - Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress i
The MasterStudy LMS WordPress Plugin - for Online Courses and Education plugin for WordPress is vulnerable to union base
The Email Subscribers by Icegram Express plugin for WordPress is vulnerable to SQL Injection via the ‘hash’ parameter in
Remote code execution in the WP Query Console WordPress plugin (versions up to and including 1.0) by Ajit Bohra allows u
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today