CVE-2025-9950 in Error Log Viewer Plugin
Tóm tắt
Bởi MITRE • 11/10/2025
The Error Log Viewer by BestWebSoft plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.6 via the rrrlgvwr_get_file function. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
Once again VulDB remains the best source for vulnerability data.