Insertion of Sensitive Information in WPChill Htaccess File Editor
CVE-2025-22773

5.3MEDIUM

Key Information:

Vendor
WordPress
Status
Htaccess File Editor
Vendor
CVE Published:
15 January 2025

Summary

A vulnerability in WPChill Htaccess File Editor allows unauthorized access to sensitive information due to incorrectly configured access control security levels. This can lead to exploitation, compromising the confidentiality of sensitive data. The issue affects versions from n/a through 1.0.19, highlighting the need for vigilance and immediate updates to secure your WordPress environment.

Affected Version(s)

Htaccess File Editor <= 1.0.19

References

https://patchstack.com/database/wordpress/plugin/htaccess...
vdb-entry

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

savphill (Patchstack Alliance)
.