CVE-2025-46527 WordPress Web3Press – Decentralize Publishing with Writing NFT plugin <= 3.2.0 - Arbitrary File Read vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in LikeCoin Web3Press allows Path Traversal. This issue affects Web3Press: from n/a through 3.2.0...

CVE-2025-46527

CVE-2025-46527 is a path-traversal based vulnerability in WordPress plugin Web3Press up to and including version 3.2.0, described as an Arbitrary File Read. The issue stems from improper pathname restrictions, allowing attackers to read arbitrary files. Public advisories (Patchstack, Red Hat, CVE...

WordPress Web3Press – Decentralize Publishing with Writing NFT plugin <= 3.2.0 - Arbitrary File Read vulnerability

Arbitrary File Read vulnerability discovered by ch4r0n in WordPress Plugin Web3Press versions = 3.2.0...