PT-2025-49802 · WordPress · Csv To Sorttable

Ivan Cese · Publicado 2025-12-09 · Atualizado 2025-12-11 · CVE-2025-13070

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Média

Vetor base

AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CSV to SortTable WordPress plugin versions through 4.2

Description The software does not properly check certain shortcode attributes before using them to create file paths that are then used with include functions. This allows users with contributor-level access to potentially perform Local File Inclusion (LFI) attacks.

Recommendations Update to a version beyond 4.2.

Exploit

Correção

Identificadores relacionados

CVE-2025-13070

Produtos afetados

Csv To Sorttable

Referências · 4

• 🔥 https://wpscan.com/vulnerability/deb52d69-d7f8-43a5-a709-1f543fd343c6 · Exploit
• https://t.me/cveNotify/145474 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-13070 · Nota de Segurança
• https://twitter.com/CVEnew/status/1998355364082041261 · Publicação no Twitter