CVE-2025-2056

Name of the Vulnerable Software and Affected Versions: The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress versions up to, and including, 5.4.01

Description: The issue allows unauthenticated attackers to read the contents of specific file types on the server, which can contain sensitive information, via the showFile function. This is a result of a Path Traversal vulnerability.

Recommendations: For versions up to, and including, 5.4.01, consider disabling the showFile function until a patch is available to prevent exploitation.