PT-2025-46942 · WordPress · Creta Testimonial Showcase

Khaled Alenazi · Published 2025-11-14 · Updated 2025-11-14 · CVE-2025-10686

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Creta Testimonial Showcase WordPress plugin versions prior to 1.2.4

Description The Creta Testimonial Showcase WordPress plugin is susceptible to a Local File Inclusion issue. Attackers with editor-level access or higher can include and execute arbitrary files on the server, potentially executing PHP code within those files.

Recommendations Update the Creta Testimonial Showcase WordPress plugin to version 1.2.4 or later.

Exploit

Fix

Related Identifiers

CVE-2025-10686

Affected Products

Creta Testimonial Showcase

References · 7

• 🔥 https://wpscan.com/vulnerability/27d58c5a-ab87-41aa-a806-53fa96d4351c · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-10686 · Security Note
• https://t.me/CVEtracker/37318 · Telegram Post
• https://t.me/cveNotify/142769 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1989271410145923347 · Twitter Post
• https://t.me/cveNotify/142798 · Telegram Post
• https://twitter.com/CVEnew/status/1989239506130862488 · Twitter Post