PT-2026-4274 · Webpros · Wordpress Toolkit

CVE-2025-66428

Publicado

2026-01-22

Atualizado

2026-01-25

CVSS v3.1

8.8

Alta

Vetor

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WebPros WordPress Toolkit versions prior to 6.9.1

Description An issue with WordPress directory names in WebPros WordPress Toolkit allows for privilege escalation.

Recommendations Update WebPros WordPress Toolkit to version 6.9.1 or later.

Correção

LPE

Path traversal

Improper Privilege Management

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

CVE-2025-66428

Wordpress Toolkit