CVE-2025-25174criticalCWE-98

CVE-2025-25174: falha crítica em BeeTeam368 Extensions

WordPress BeeTeam368 Extensions Plugin <= 1.9.4 - Local File Inclusion Vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar BeeTeam368 Extensions

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 10epss 0.6%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in beeteam368 BeeTeam368 Extensions beeteam368-extensions allows PHP Local File Inclusion.This issue affects BeeTeam368 Extensions: from n/a through <= 1.9.4.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
beeteam368 · BeeTeam368 Extensions
CVEs relacionadas — BeeTeam368 Extensions

No mesmo produto, das mais perigosas para as menos.

CVE-2025-6381HIGHBeeTeam368 Extensions <= 2.3.4 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File DeletionEPSS 0.8%CVE-2025-6423HIGHBeeTeam368 Extensions <= 2.3.5 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.6%