PT-2025-5410 · Unknown · Redefiningtheweb Pdf Generator Addon

Thiennv · Published 2025-02-03 · Updated 2025-02-03 · CVE-2025-24569

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions RedefiningTheWeb PDF Generator Addon for Elementor Page Builder versions 1.7.5 and earlier

Description The issue is related to an improper limitation of a pathname to a restricted directory, also known as 'Path Traversal'. This allows unauthorized access to files and directories outside the intended directory.

Recommendations For versions 1.7.5 and earlier, update to a version later than 1.7.5 to resolve the issue. At the moment, there is no information about additional mitigation measures.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-24569

Affected Products

Redefiningtheweb Pdf Generator Addon

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-24569 · Security Note
• https://patchstack.com/database/wordpress/plugin/pdf-generator-addon-for-elementor-page-builder/vulnerability/wordpress-pdf-generator-addon-for-elementor-page-builder-plugin-1-7-5-arbitrary-file-read-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1886427074199445563 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/pdf-generator-addon-for-elementor-page-builder/vulnerability/wordpress-pdf-generator-addon-for-elementor-page-builder-plugin-1-7-5-arbitrary-file-read-vulnerability?_s_id=cve · Note