CVE-2025-13070

MediumCVSS 6.6

Published: 09/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

37th percentile - higher than 37% of all known CVEs

Summary

The CSV to SortTable WordPress plugin through version 4.2 does not validate some shortcode attributes before using them to generate paths passed to include functions, allowing authenticated users such as contributors to perform LFI attacks.

Risk Assessment

The risk includes reading sensitive server files, potentially leading to data disclosure or further compromise.

Recommendation

Update the plugin to the latest version or manually remove vulnerable shortcode attributes.

Other vulnerabilities in CSV to SortTable

CVE-2025-12823Medium
The CSV to SortTable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'csv' shortcode in all versions up to, and including, 4.2 due to insufficient input sanitization and output escaping on user-supplied attributes. An authenticated attacker with Contributor-level access or higher can inject arbitrary web scripts into pages that execute when a user visits the injected page.

Original NVD description (English source)

The CSV to SortTable WordPress plugin through 4.2 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as contributor to perform LFI attacks.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS