← All advisories

High severity8.1NVD Advisory· Published May 16, 2025· Updated Apr 28, 2026

CVE-2025-39491

CVE-2025-39491

Description

Path Traversal vulnerability in WHMPress WHMpress allows Path Traversal. This issue affects WHMpress: from 6.2 through revision.

Affected products

2

WordPress/Whmpressinferred2 versions
>=6.2+ 1 more
- (no CPE)range: >=6.2
- (no CPE)range: >=6.2 <r9
Package: https://wordpress.org/plugins/whmpress

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/whmpress/vulnerability/wordpress-whmpress-plugin-6-2-revision-9-local-file-inclusion-vulnerability-2nvd

News mentions

0

No linked articles in our index yet.