CVE-2025-1565

Summary

CVE-2025-1565 is a vulnerability affecting the Mayosis Core plugin for WordPress. In all versions up to 5.4.1, this issue allows unauthenticated attackers to read arbitrary files on the server through the library/wave-audio/peaks/remote_dl.php file. The vulnerability stems from an Arbitrary File Read vulnerability, enabling attackers to access and potentially obtain sensitive information residing within the affected files. This poses a significant risk to WordPress sites utilizing the Mayosis Core plugin and emphasizes the importance of updating to the latest, secure version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.