Directory Traversal in BeeTeam368 Extensions Pro Plugin for WordPress

CVE-2025-6379

What is CVE-2025-6379?

The BeeTeam368 Extensions Pro plugin for WordPress has a Directory Traversal vulnerability that affects all versions up to and including 2.3.4. This flaw allows authenticated attackers, including those with Subscriber-level access, to manipulate files outside of the intended directories through the handle_live_fn() function. Exploiting this vulnerability enables potential actions like the deletion of the wp-config.php file, posing a risk of complete site compromise.

References