CVE-2025-24765
BaseFortify
Publication date: 2025-06-27
Last updated on: 2026-04-23
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-22 | The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in the WordPress Image Shadow plugin (up to version 1.1.0) allows a malicious user with subscriber-level privileges to perform arbitrary file deletion on the affected website. It is a Path Traversal issue that enables attackers to delete critical files, potentially causing the website to malfunction or become completely inoperative. It falls under the OWASP Top 10 category A1: Broken Access Control and has a high severity score of 7.7. [1]
How can this vulnerability impact me? :
If exploited, this vulnerability can allow an attacker to delete arbitrary files on your website, including critical core files. This can lead to website malfunction or complete inoperability, disrupting your online presence and potentially causing data loss or downtime. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection of this vulnerability involves monitoring for exploitation attempts targeting the Image Shadow plugin, especially file deletion activities initiated by subscriber-level users. Since no official patch is available, applying Patchstack's virtual patch can help block exploitation attempts. Additionally, professional incident response and server-side malware scanning are recommended to identify any compromise. Specific commands are not provided in the available resources. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include applying the virtual patch (vPatch) provided by Patchstack to block exploitation attempts until an official update is released. It is also recommended to perform professional incident response and server-side malware scanning if the site is suspected to be compromised. Monitoring and restricting subscriber-level privileges may also help reduce risk. [1]