Directory Traversal Vulnerability in BestWebSoft Error Log Viewer for WordPress

CVE-2025-9950

What is CVE-2025-9950?

The Error Log Viewer plugin by BestWebSoft for WordPress is exposed to a Directory Traversal vulnerability that allows authenticated users with Administrator privileges or higher to access and read files outside the intended directory. This flaw, found in all versions up to and including 1.1.6, can lead to the leakage of sensitive information from the server, posing significant security risks for websites using this plugin.

References