CVE-2025-4524

CVE-2025-4524 - 認証されていない madara-core WordPress テーマ LFI WordFence リンク 説明 madara の madaraloadmore アクションに脆弱性があります。ここでは template パラメータがユーザーからの任意のデータとして扱われ、PHP の include 関数に渡されます。 脆弱性 madara の madaraloadmore アクションに脆弱性があります。ここでは template パラメータがユーザーからの任意のデータとして扱われ、PHP の include 関数に渡されます。...

CVE-2025-7712 Madara - Core <= 2.2.3 - Unauthenticated Arbitrary File Deletion

The Madara - Core plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the wpmangadeletezip function in all versions up to, and including, 2.2.3. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, whic...

PT-2025-29899 · WordPress · Madara - Core

Name of the Vulnerable Software and Affected Versions: Madara - Core plugin for WordPress versions prior to 2.2.3 Description: The Madara - Core plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the wp manga delete zip function. This allows...

WordPress plugin Madara - Core 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A path traversal...

Exploit for CVE-2025-4524

CVE-2025-4524 - Unauthenticated madara-core Wordpress theme LF...