Local File Inclusion Vulnerability in Majestic Support Plugin by Majestic Software
CVE-2025-64284

7.5HIGH

Key Information:

Vendor

WordPress
Status
Majestic Support
Vendor
CVE Published:
29 October 2025

What is CVE-2025-64284?

The Majestic Support plugin is susceptible to a Local File Inclusion (LFI) vulnerability due to improper control over filename parameters in PHP scripts. This flaw allows unauthorized users to potentially include arbitrary files from the server, which may lead to sensitive data exposure or remote code execution. Users of Majestic Support versions 1.1.1 and prior are at risk, emphasizing the need for immediate updates to safeguard their web applications.

Affected Version(s)

Majestic Support <= n/a

References

https://vdp.patchstack.com/database/Wordpress/Plugin/maje...
vdb-entry

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program
JSON
.