CVE-2025-66428

creationtimestamp| type| source ---|---|--- 2026-01-24 07:45:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md5pvg76m727...

CVE-2025-66428

The WebPros WordPress Toolkit (prior to version 6.9.1 ) is vulnerable to a privilege escalation flaw. The root cause involves issues with how WordPress directory names are handled, specifically through the manipulation of directory names . This vulnerability could allow an attacker to gain elevat...