CVE-2025-8009 in Security Ninja Plugin
Summary
by MITRE • 07/24/2025
The Security Ninja – WordPress Security Plugin & Firewall plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.242 via the 'get_file_source' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to extract sensitive data, including the contents of any file on the server.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.