← Back

Wp01ru

wp01ru

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Wp01
wp01
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-2267
1Wp01ru
1Wp01
Jun 17, 2026
Mar 15, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
The WP01 plugin for WordPress is vulnerable to Arbitrary File Download in all versions up to, and including, 2.6.2 due to a missing capability check and insufficient restrictions on the make_archive() function. This make...Show more
The WP01 plugin for WordPress is vulnerable to Arbitrary File Download in all versions up to, and including, 2.6.2 due to a missing capability check and insufficient restrictions on the make_archive() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to download and read the contents of arbitrary files on the server, which can contain sensitive information. CVE-2025-30567 is a duplicate of this issue.Show less