Remote Code Execution Vulnerability in Sneeit Framework Plugin for WordPress

CVE-2025-6389

What is CVE-2025-6389?

The Sneeit Framework plugin for WordPress is susceptible to Remote Code Execution due to inadequate validation in the sneeit_articles_pagination_callback() function. This vulnerability enables attackers to send specially crafted user input, which is processed via call_user_func(), granting them the ability to execute malicious code on the server. This can lead to serious security incidents, such as the installation of backdoors or the unauthorized creation of administrative accounts, thereby compromising the integrity of the website.

References