Local File Inclusion Vulnerability in WP Shuffle Subscribe to Download Lite by WordPress

CVE-2025-30782

What is CVE-2025-30782?

The WP Shuffle Subscribe to Download Lite plugin is affected by a vulnerability that allows for local file inclusion through improper control of filenames in PHP programming. This flaw can potentially expose sensitive files on the server, leading to a range of security issues. Users of the affected versions, from n/a up to 1.2.9, are advised to upgrade to secure their installations and prevent unauthorized file access.

References