Arbitrary File Read Vulnerability in Propovoice Client Management System for WordPress

CVE-2025-8422

What is CVE-2025-8422?

The Propovoice: All-in-One Client Management System plugin for WordPress is susceptible to an Arbitrary File Read vulnerability, allowing unauthenticated users to exploit the send_email() function. This flaw permits unauthorized access to sensitive files on the server, potentially exposing private information and compromising system integrity. It is critical for users running versions up to 1.7.6.7 to assess their security measures and apply necessary patches to safeguard their data.

References