CVE-2025-1769

{"id": "CVE-2025-1769", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "security@wordfence.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.2}]}, "published": "2025-03-26T12:15:15.040", "references": [{"url": "https://plugins.trac.wordpress.org/browser/product-import-export-for-woo/trunk/admin/modules/history/history.php#L753", "source": "security@wordfence.com"}, {"url": "https://plugins.trac.wordpress.org/changeset/3261194/", "source": "security@wordfence.com"}, {"url": "https://wordpress.org/plugins/product-import-export-for-woo/#developers", "source": "security@wordfence.com"}, {"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4df60fbe-4475-4cbf-b497-a9c5251bc91f?source=cve", "source": "security@wordfence.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Primary", "source": "security@wordfence.com", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "The Product Import Export for WooCommerce \u2013 Import Export Product CSV Suite plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.5.0 via the download_file() function. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary log files on the server, which can contain sensitive information."}, {"lang": "es", "value": "El complemento Product Import Export for WooCommerce \u2013 Import Export Product CSV Suite para WordPress es vulnerable a la navegaci\u00f3n de directorios en todas las versiones hasta la 2.5.0 incluida, a trav\u00e9s de la funci\u00f3n download_file(). Esto permite que atacantes autenticados, con acceso de administrador o superior, lean el contenido de archivos de registro arbitrarios en el servidor, que pueden contener informaci\u00f3n confidencial."}], "lastModified": "2025-03-27T16:45:27.850", "sourceIdentifier": "security@wordfence.com"}