CVE-2025-0822

Summary

CVE-2025-0822 is a path traversal vulnerability affecting the Bit Assist plugin for WordPress. This issue, present in versions 1.5.2 and below, enables authenticated attackers with Subscriber-level access or higher to read arbitrary files on the server. By manipulating the fileID parameter, attackers can bypass security restrictions, potentially gaining unauthorized access to sensitive information stored on the compromised system. This vulnerability underscores the importance of keeping plugins updated to mitigate security risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.