PT-2025-25483
CVE-2025-6070
·
Published
2025-06-13
·
Updated
2025-06-17
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Restrict File Access plugin for WordPress versions up to, and including, 1.1.2
Description
The issue allows authenticated attackers with Subscriber-level access and above to read the contents of arbitrary files on the server, which can contain sensitive information, via the
output() function.Recommendations
For Restrict File Access plugin for WordPress versions up to, and including, 1.1.2, consider disabling the
output() function until a patch is available to prevent exploitation. Found an issue in the description? Have something to add? Feel free to write us 👾