Executive Summary

CVE-2025-67957 is a Local File Inclusion (LFI) vulnerability in the WordPress Listivo Core Plugin versions up to 2.3.77. It allows an unauthenticated attacker to include and display local files from the target website by exploiting improper control of filenames in include/require statements. This can expose sensitive information such as database credentials and potentially lead to a complete database takeover depending on the website's configuration. [1]

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can impact you by allowing an attacker to access and display sensitive local files on your website without authentication. This exposure can lead to disclosure of critical information like database credentials and may result in a complete database takeover, compromising the security and integrity of your website and data. [1]

Useful 0 Not Useful 0

Compliance Impact

This vulnerability can negatively affect compliance with standards such as GDPR and HIPAA because it may lead to unauthorized disclosure of sensitive personal or protected health information stored on the affected system. Such data breaches can result in violations of data protection regulations, leading to legal and financial consequences. [1]

Useful 0 Not Useful 0

Detection Guidance

Detection of this Local File Inclusion (LFI) vulnerability can be done by monitoring for attempts to include local files via the vulnerable WordPress Listivo Core Plugin (versions ≤ 2.3.77). One can look for suspicious HTTP requests targeting the plugin that attempt to include local files, such as requests containing parameters with file paths (e.g., ../../etc/passwd). Network or web server logs can be searched for such patterns. Specific commands might include using grep on web server logs to find suspicious inclusion attempts, for example: grep -i 'listivo-core' /var/log/apache2/access.log | grep -E '(\.|%2e){2,}/' or using intrusion detection systems with rules targeting this vulnerability. Patchstack provides mitigation rules that can help detect and block attacks targeting this vulnerability. [1]

Useful 0 Not Useful 0

Mitigation Strategies

The immediate mitigation step is to update the WordPress Listivo Core Plugin to version 2.3.78 or later, where the vulnerability is fixed. Until the update can be applied, users of Patchstack can enable mitigation rules provided by Patchstack to block attacks targeting this vulnerability. Additionally, enabling auto-updates for vulnerable plugins can ensure rapid protection against exploitation. [1]

Useful 0 Not Useful 0