CVE-2025-1730
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Mar 1, 2025
CWE ID 73
Summary
CVE-2025-1730: The Simple Download Counter plugin for WordPress, used in versions up to 2.0, contains a vulnerability that allows authenticated attackers with Author-level access or higher to perform Arbitrary File Read. This vulnerability enables the extraction of sensitive data, such as wp-config.php or /etc/passwd, posing a significant security risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress