CVE-2025-63003

Name of the Vulnerable Software and Affected Versions North - Required Plugin versions prior to 1.4.3

Description The North plugin for WordPress contains a Local File Inclusion issue. This allows authenticated attackers with contributor-level access or higher to include and execute arbitrary files on the server. By including files, an attacker can execute PHP code, bypass access controls, or obtain sensitive data, particularly when images or other safe file types are uploaded and then included.

Recommendations Update North - Required Plugin to a version newer than 1.4.2.