CVE-2025-7327: Widget for Google Reviews <= 1.0.15 - Authenticated (Subscriber+) Directory Traversal to Local File Inclusion
The Widget for Google Reviews plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.0.15 via the layout parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. This is limited to just PHP files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress plugin: Widget for Google Reviewsto a version that resolves this vulnerability.Fixed in 1.0.15 - Configuration
Implement a server configuration so that even if an attacker can include PHP files via Local File Inclusion, PHP execution is blocked in writable/uploaded directories.
WordPress (server-side file access) Block direct access to uploaded PHP files / prevent PHP execution in writable upload directories = Disable PHP execution in the upload directory (e.g., ensure any uploaded files under the WordPress uploads path are not executed as PHP). - Compensating control
Because exploitation requires authenticated Subscriber-level access and above, restrict access to WordPress accounts with the least privilege necessary (remove/limit Subscriber+ accounts that are not required) and monitor for suspicious authenticated requests using the layout parameter.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7327?
CVE-2025-7327 has a medium severity rating due to its potential for local privilege escalation through directory traversal.
How can I fix CVE-2025-7327?
To mitigate CVE-2025-7327, update the Widget for Google Reviews plugin to version 1.0.16 or later.
Who is affected by CVE-2025-7327?
CVE-2025-7327 affects users of the Widget for Google Reviews plugin for WordPress, specifically those with Subscriber-level access and above.
What type of vulnerability is CVE-2025-7327?
CVE-2025-7327 is a directory traversal vulnerability that allows authenticated attackers to execute arbitrary files.
What versions are impacted by CVE-2025-7327?
CVE-2025-7327 impacts all versions of the Widget for Google Reviews plugin up to and including 1.0.15.