CVE-2025-66428

creationtimestamp| type| source ---|---|--- 2026-01-24 07:45:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md5pvg76m727...

CVE-2025-66428

Summary: CVE-2025-66428 affects WebPros WordPress Toolkit prior to 6.9.1. The flaw arises from manipulation of WordPress directory names, enabling privilege escalation. The reported impact is high (CVSS v3.1: 8.8; network attack, low complexity, user interaction none; privileges required low). Re...