PT-2026-6881 · Unknown · Post Slides

Khaled Alenazi · CVE-2025-15491 · Published 2026-02-07 · Updated 2026-02-07

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Post Slides versions through 1.0.1

Description The software does not properly check shortcode attributes before using them to create file paths for inclusion, potentially allowing authenticated users with contributor or higher privileges to carry out Local File Inclusion (LFI) attacks.

Recommendations Update Post Slides to a version later than 1.0.1.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-15491

Affected Products

Post Slides

References · 4

• 🔥 https://wpscan.com/vulnerability/eb0424cc-e60c-44a5-aa24-cd1fe042b27a · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-15491 · Security Note
• https://t.me/CVEtracker/44015 · Telegram Post
• https://t.me/cveNotify/151236 · Telegram Post