CVE-2025-32152

Summary

CVE-2025-32152 is a filename control vulnerability affecting Essential Plugins by WP OnlineSupport and their SlidersPack product. The issue allows for PHP Local File Inclusion, giving attackers the ability to access and execute arbitrary local files on affected systems. The vulnerability lies in the improper handling of include/require statements in the PHP program. Versions of Slider a SlidersPack from the not provided through 2.3 are reportedly impacted. This vulnerability poses a significant risk for those using the affected plugin and could lead to serious consequences if exploited.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.