Beveiligingsadvies

CVE-2018-25437

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-15 12:00:51

Laatst bijgewerkt 2026-07-28 01:46:46

Toegewezen door VulnCheck

CVSS-score 8.7

Status PUBLISHED

Beschrijving

WordPress CherryFramework Themes 3.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to download sensitive backup files by accessing the download_backup.php endpoint. Attackers can directly access the download_backup.php script in the admin/data_management directory to obtain ZIP archives containing the entire wp-content/themes directory contents.

← Alle CVE's bekijken Bekijk op cve.org ↗