Path Traversal Vulnerability in User Extra Fields Plugin by Vanquish

CVE-2025-69377

What is CVE-2025-69377?

The User Extra Fields plugin developed by Vanquish is susceptible to a path traversal vulnerability, which allows an attacker to exploit improperly validated file paths. This flaw facilitates unauthorized access to sensitive files on the server, potentially leading to arbitrary file deletion or exposure of sensitive data. Affected versions include all prior to and including version 17.0, highlighting the critical need for users to update their installations to maintain security.

References