CVE-2025-3740
BaseFortify
Publication date: 2025-07-18
Last updated on: 2025-07-22
Assigner: Wordfence
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| wordfence | school_management_system | 93.1.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-22 | The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. |
Attack-Flow Graph
AI Powered Q&A
What immediate steps should I take to mitigate this vulnerability?
Update the School Management System for WordPress plugin to version 1.93.1 or later, as this version contains the patch for the Local File Inclusion vulnerability. Ensure that only trusted users have Subscriber-level access or higher, and monitor for any suspicious activity related to file inclusion or privilege escalation attempts.
Can you explain this vulnerability to me?
This vulnerability is a Local File Inclusion (LFI) issue in the School Management System for WordPress plugin, affecting all versions up to 93.1.0. It allows authenticated users with Subscriber-level access or higher to include and execute arbitrary files on the server via the 'page' parameter. This means attackers can run any PHP code contained in those files, potentially bypassing access controls, accessing sensitive data, or executing malicious code. The exploit can be chained to escalate privileges, such as updating Super Administrator passwords in Multisite environments.
How can this vulnerability impact me? :
The vulnerability can lead to serious impacts including unauthorized code execution on the server, bypassing access controls, exposure of sensitive data, and privilege escalation to Super Administrator level in WordPress Multisite setups. This could result in full compromise of the affected WordPress site and its data.