PT-2026-1891 · Vidmov · Vidmov

Published 2026-01-08 · Updated 2026-01-08 · CVE-2025-67914

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions VidMov versions prior to 2.3.9

Description The software contains a path traversal flaw due to insufficient sanitization of user-supplied input. An attacker could potentially leverage this to access files and directories outside the intended scope. The vulnerability is triggered by manipulating file paths using the sequence '.../...//'. There is no information about the number of potentially affected devices or any real-world incidents where this issue was exploited. The vulnerable component is the file handling mechanism within VidMov.

Recommendations Update VidMov to version 2.3.9 or later.

Fix

Weakness Enumeration

CWE-35

Related Identifiers

CVE-2025-67914

Affected Products

Vidmov

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-67914 · Security Note
• https://vdp.patchstack.com/database/Wordpress/Theme/vidmov/vulnerability/wordpress-vidmov-theme-2-3-8-path-traversal-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2009194582412558702 · Twitter Post
• https://patchstack.com/database/Wordpress/Theme/vidmov/vulnerability/wordpress-vidmov-theme-2-3-8-path-traversal-vulnerability?_s_id=cve · Note