PT-2026-6881 · Unknown · Post Slides

Khaled Alenazi · Publicado 2026-02-07 · Atualizado 2026-02-07 · CVE-2025-15491

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Post Slides versions through 1.0.1

Description The software does not properly check shortcode attributes before using them to create file paths for inclusion, potentially allowing authenticated users with contributor or higher privileges to carry out Local File Inclusion (LFI) attacks.

Recommendations Update Post Slides to a version later than 1.0.1.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2025-15491

Produtos afetados

Post Slides

Referências · 4

• 🔥 https://wpscan.com/vulnerability/eb0424cc-e60c-44a5-aa24-cd1fe042b27a · Exploit
• https://t.me/CVEtracker/44015 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-15491 · Nota de Segurança
• https://t.me/cveNotify/151236 · Publicação no Telegram