CVE-2025-9950

Name of the Vulnerable Software and Affected Versions Error Log Viewer by BestWebSoft plugin for WordPress versions up to and including 1.1.6

Description The Error Log Viewer by BestWebSoft plugin for WordPress is susceptible to Directory Traversal. This allows authenticated attackers with Administrator-level access or higher to read the contents of arbitrary files on the server, potentially exposing sensitive information. The issue resides within the rrrlgvwr get file function.

Recommendations Update the Error Log Viewer by BestWebSoft plugin to a version later than 1.1.6.