CVE-2025-2841

Name of the Vulnerable Software and Affected Versions: Cart66 Cloud plugin for WordPress versions 2.3.7 and earlier

Description: The issue allows unauthenticated attackers to view potentially sensitive information contained in an exposed file through the publicly accessible phpinfo.php script.

Recommendations: For versions 2.3.7 and earlier, consider restricting access to the phpinfo.php script to minimize the risk of exploitation. As a temporary workaround, remove or disable the phpinfo.php script until a patch is available.