Local File Inclusion Vulnerability in MadrasThemes MAS Videos Plugin
CVE-2025-62753

7.5HIGH

Key Information:

Vendor

WordPress
Status
Mas Videos
Vendor
CVE Published:
30 December 2025

What is CVE-2025-62753?

The MadrasThemes MAS Videos plugin for WordPress is susceptible to a local file inclusion vulnerability that arises due to improper handling of file paths in PHP. This issue can allow an attacker to manipulate the program's include/require statement, potentially leading to unauthorized access to sensitive files within the web server environment. The vulnerability affects all versions up to and including 1.3.2, posing a risk to users who have not updated to the latest version.

Affected Version(s)

MAS Videos 0 <= 1.3.4

References

https://patchstack.com/database/Wordpress/Plugin/masvideo...
vdb-entry

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Muhammad Yudha - DJ | Patchstack Bug Bounty Program
.