WordPress Plugin Panic: Vulnerability Lets Subscribers Peek at Sensitive Files!
Hold onto your server hats, folks! The Anti-Malware Security and Brute-Force Firewall plugin for WordPress is dealing with a vulnerability that’s got subscribers reading files like a bestseller. Identified as CVE-2025-11705, this bug invites low-privileged users to peek at confidential info. Plugin update 4.23.83 is your new best friend!
Hot Take:
Well, folks, when your “Anti-Malware Security” plugin is the one with the vulnerability, it’s like hiring a guard dog that invites burglars over for tea. Time to put a leash on this WordPress watchdog!
Key Points:
- Vulnerability in Anti-Malware plugin allows file reading on WordPress sites.
- CVE-2025-11705 affects plugin versions 4.23.81 and earlier.
- Low-privileged users can exploit the flaw to access sensitive server files.
- Patch released in version 4.23.83 to address the vulnerability.
- 50,000 sites still potentially vulnerable; patch application urged.
Already a member? Log in here