CVE-2025-30782

Summary

CVE-2025-30782 is a filename control vulnerability affecting WP Shuffle Subscribe to Download Lite, a plugin used in PHP programs. The issue, classified as a PHP Remote File Inclusion (RFI) vulnerability, allows attackers to include local files on affected systems by manipulating the include/require statement. This can potentially lead to sensitive data exposure or arbitrary code execution. The vulnerability affects WP Shuffle Subscribe to Download Lite versions from n/a through 1.2.9. System administrators are urged to update the plugin to the latest version to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.