CVE-2025-24611: WordPress Export All Posts, Products, Orders, Refunds & Users Plugin <= 2.9 - Arbitrary File Read vulnerability
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Smackcoders Inc., WP Ultimate Exporter wp-ultimate-exporter allows Absolute Path Traversal.This issue affects WP Ultimate Exporter: from n/a through <= 2.9.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-24611?
CVE-2025-24611 has been classified as a high severity vulnerability due to its potential for absolute path traversal.
How do I fix CVE-2025-24611?
To fix CVE-2025-24611, please update the WP Ultimate Exporter plugin to the latest version that resolves the vulnerability.
What versions of WP Ultimate Exporter are affected by CVE-2025-24611?
CVE-2025-24611 affects WP Ultimate Exporter versions from n/a through 2.9.
What type of attack can CVE-2025-24611 facilitate?
CVE-2025-24611 allows attackers to exploit path traversal to access sensitive files in the server's filesystem.
Is CVE-2025-24611 specific to any particular platform?
CVE-2025-24611 is specifically a vulnerability in the Smackcoders WP Ultimate Exporter and the associated WordPress Export Plugins.