PT-2025-41683 · WordPress+1 · Wordpress+1

Duc Manh · Published 2025-10-11 · Updated 2025-10-11 · CVE-2025-9950

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Error Log Viewer by BestWebSoft plugin for WordPress versions up to and including 1.1.6

Description The Error Log Viewer by BestWebSoft plugin for WordPress is susceptible to Directory Traversal. This allows authenticated attackers with Administrator-level access or higher to read the contents of arbitrary files on the server, potentially exposing sensitive information. The issue resides within the rrrlgvwr get file function.

Recommendations Update the Error Log Viewer by BestWebSoft plugin to a version later than 1.1.6.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-9950

Affected Products

Error Log Viewer

Wordpress

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-9950 · Security Note
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3378018%40error-log-viewer&new=3378018%40error-log-viewer&sfp_email=&sfph_mail= · Note
• https://twitter.com/CVEnew/status/1976948521095118954 · Twitter Post
• https://t.me/CVEtracker/34676 · Telegram Post
• https://wordfence.com/threat-intel/vulnerabilities/id/9455eccb-9f32-4e4e-8fe4-f345bf6e8da7?source=cve · Note
• https://plugins.trac.wordpress.org/browser/error-log-viewer/tags/1.1.6/error-log-viewer.php#L118 · Note