CVE-2025-9215

🗓️ 17 Sep 2025 06:17:47Reported by WordfenceType

cve🔗 web.nvd.nist.gov👁 18 Views🌐 WEB

Path traversal in StoreEngine plugin up to 1.5.0 lets subscribers read server files via file_download().

Reporter	Title	Published	Views	Family All 12
GithubExploit	Exploit for CVE-2025-9215	19 Aug 202521:04	–	githubexploit
Circl	CVE-2025-9215	17 Sep 202509:25	–	circl
CNNVD	WordPress plugin StoreEngine 路径遍历漏洞	17 Sep 202500:00	–	cnnvd
CNVD	WordPress StoreEngine plugin path traversal vulnerability	19 Sep 202500:00	–	cnvd
Cvelist	CVE-2025-9215 StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Download	17 Sep 202506:17	–	cvelist
EUVD	EUVD-2025-29695	3 Oct 202520:07	–	euvd
NVD	CVE-2025-9215	17 Sep 202507:15	–	nvd
Patchstack	WordPress StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More plugin <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Download vulnerability	17 Sep 202500:08	–	patchstack
Positive Technologies	PT-2025-38122	17 Sep 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-9215	19 Sep 202506:25	–	redhatcve

Vulners

Node

kodezen storeengine_complete_ecommerce_solution_with_memberships,_licensing,_affiliates_&_moreRange≤1.5.0wordpress

[
  {
    "vendor": "kodezen",
    "product": "StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.5.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/storeengine/trunk/addons/csv/ajax/export.php
ryankozak	www.ryankozak.com/posts/cve-2025-9215/
github	www.github.com/d0n601/CVE-2025-9215
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/07b1dc05-1340-4ea3-9315-3e1ca4a0cb7f
plugins	www.plugins.trac.wordpress.org/changeset/3360097/storeengine/trunk/addons/csv/ajax/export.php

Parameter	Position	Path	Description	CWE
action	query param	/wp-admin/admin-ajax.php	Path traversal via file_download action allows authenticated users to read arbitrary server files	CWE-22
filename	query param	/wp-admin/admin-ajax.php	Path traversal via file_download action allows authenticated users to read arbitrary server files	CWE-22

15 Apr 2026 00:35Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.16.5

EPSS0.00042

SSVC

CWE-22