Beveiligingsadvies

CVE-2025-9516

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-09-04 04:23:48

Laatst bijgewerkt 2026-04-08 16:51:07

Toegewezen door Wordfence

CVSS-score 4.9

Status PUBLISHED

Beschrijving

The atec Debug plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.2.22 via the 'custom_log' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to view the contents of files outside of the originally intended directory.

← Alle CVE's bekijken Bekijk op cve.org ↗