CVE-2025-6389: Sneeit Framework <= 8.3 - Unauthenticated Remote Code Execution in sneeit_articles_pagination_callback
The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeitarticlespaginationcallback() function. This is due to the function accepting user input and then passing that through calluserfunc(). This makes it possible for unauthenticated attackers to execute code on the server which can be leveraged to inject backdoors or, for example, create new administrative user accounts.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6389?
CVE-2025-6389 is classified as a high-severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2025-6389?
To fix CVE-2025-6389, update the Sneeit Framework plugin to version 8.4 or later.
What systems are affected by CVE-2025-6389?
CVE-2025-6389 affects all versions of the Sneeit Framework up to and including version 8.3.
What is the cause of CVE-2025-6389?
CVE-2025-6389 is caused by the sneeit_articles_pagination_callback() function accepting unvalidated user input.
Is CVE-2025-6389 easy to exploit?
Yes, CVE-2025-6389 can be easily exploited by an attacker to execute arbitrary code on the affected WordPress site.