Path Traversal Vulnerability in List Category Posts by Fernando Briano

CVE-2025-47636

Summary

A Path Traversal vulnerability has been identified in the List Category Posts plugin by Fernando Briano, which allows for PHP Local File Inclusion. This security flaw affects versions up to and including 0.90.3. By exploiting this vulnerability, an attacker may gain unauthorized access to the local files of the web server, potentially leading to further exploitation of the system.

References