PT-2025-49802 · WordPress · Csv To Sorttable

Ivan Cese · CVE-2025-13070 · Published 2025-12-09 · Updated 2025-12-11

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CSV to SortTable WordPress plugin versions through 4.2

Description The software does not properly check certain shortcode attributes before using them to create file paths that are then used with include functions. This allows users with contributor-level access to potentially perform Local File Inclusion (LFI) attacks.

Recommendations Update to a version beyond 4.2.

Exploit

Fix

Related Identifiers

CVE-2025-13070

Affected Products

Csv To Sorttable

References · 4

• 🔥 https://wpscan.com/vulnerability/deb52d69-d7f8-43a5-a709-1f543fd343c6 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-13070 · Security Note
• https://t.me/cveNotify/145474 · Telegram Post
• https://twitter.com/CVEnew/status/1998355364082041261 · Twitter Post