CVE-2025-8385
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
The Zombify plugin for WordPress up to version 1.7.5 is vulnerable to Path Traversal due to insufficient input validation in the zf_get_file_by_url function. This allows authenticated attackers with subscriber-level access or above to read arbitrary files on the server, including sensitive system files like /etc/passwd, via a forged request. Successful exploitation relies on a race condition as the generated file is deleted immediately.
Risk Assessment
An attacker can access sensitive system files, potentially leading to disclosure of confidential information and further privilege escalation.
Recommendation
It is recommended to update the Zombify plugin to a version newer than 1.7.5 that includes a fix for input validation.
Other vulnerabilities in Zombify
Original NVD description (English source)
The Zombify plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.7.5. This is due to insufficient input validation in the zf_get_file_by_url function. This makes it possible for authenticated attackers, with subscriber-level access and above, to read arbitrary files on the server, including sensitive system files like /etc/passwd, via a forged request. It's worth noting that successfully exploiting this vulnerability relies on a race condition as the file generated will be deleted immediately.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS