Medium severity6.6NVD Advisory· Published Dec 9, 2025· Updated Jun 17, 2026
CVE-2025-13070
CVE-2025-13070
Description
The CSV to SortTable WordPress plugin through 4.2 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as contributor to perform LFI attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<=4.2+ 1 more
- (no CPE)range: <=4.2
- (no CPE)range: <=4.2
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.