Path Traversal Vulnerability in Simple WP Events by WPMinds
CVE-2025-32509

7.5HIGH

Key Information:

Vendor

WordPress
Status
Simple WP Events
Vendor
CVE Published:
11 April 2025

What is CVE-2025-32509?

A path traversal vulnerability exists in the Simple WP Events plugin by WPMinds, which allows attackers to access restricted directories. This issue can lead to unauthorized file access and potential data exposure. The vulnerability affects versions from n/a up to 1.8.17, posing risks to WordPress sites utilizing the plugin. Proper mitigation strategies and updates are necessary to safeguard against this security flaw.

Affected Version(s)

Simple WP Events <= 1.8.17

References

https://patchstack.com/database/wordpress/plugin/simple-w...
vdb-entry

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mika (Patchstack Alliance)
.