Beveiligingsadvies

CVE-2025-9517

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-09-04 04:23:48

Laatst bijgewerkt 2026-04-08 17:10:59

Toegewezen door Wordfence

CVSS-score 7.2

Status PUBLISHED

Beschrijving

The atec Debug plugin for WordPress is vulnerable to remote code execution in all versions up to, and including, 1.2.22 via the 'custom_log' parameter. This is due to insufficient sanitization when saving the custom log path. This makes it possible for authenticated attackers, with Administrator-level access and above, to execute code on the server.

← Alle CVE's bekijken Bekijk op cve.org ↗