PT-2025-21149 · Themewinter · Eventin

Astra.R3Verii · Publicado 2025-05-14 · Atualizado 2025-12-04 · CVE-2025-47445

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Eventin versions n/a through 4.0.26

Description: The issue affects Themewinter Eventin, allowing Relative Path Traversal. This enables Path Traversal, which can be exploited.

Recommendations: For versions n/a through 4.0.26, update to a version later than 4.0.26 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Relative Path Traversal

Enumeração de Fraquezas

CWE-23

Identificadores relacionados

CVE-2025-47445

Produtos afetados

Eventin

Referências · 10

• https://t.me/cvetracker/23826 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1922695643530920027 · Publicação no Twitter
• https://twitter.com/cracbot/status/1924419850341961793 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-47445 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-47445 · Aviso do Fabricante
• https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-eventin-4-0-26-arbitrary-file-download-vulnerability?_s_id=cve · Nota
• https://twitter.com/pdnuclei_bot/status/1996519883585225163 · Publicação no Twitter
• https://patchstack.com/database/Wordpress/Plugin/wp-event-solution/vulnerability/wordpress-eventin-4-0-26-arbitrary-file-download-vulnerability?_s_id=cve · Nota
• https://t.me/cveNotify/131765 · Publicação no Telegram
• https://t.me/cvenotify/122106 · Publicação no Telegram