CrowdSecLive Exploit Tracker
Limited ExploitationCVE-2025-30567Public Exploit

WP01 - Path Traversal (CVE-2025-30567)

PublishedMar 25, 2025
First SeenN/A
Last Seen
Reported
CVSS7.5
wp01ru
wp01ruWP01
cmswordpress

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in wp01ru WP01 allows Path Traversal. This issue affects WP01: from n/a through 2.6.2.

psychologyCrowdSec Analysis

CVE-2025-30567 is a path traversal vulnerability in wp01ru WP01 versions up to 2.6.2, allowing attackers to access files and directories outside the intended restricted directory. Exploiting this flaw could enable unauthorized disclosure of sensitive files or system compromise.

CrowdSec has been tracking this vulnerability and its exploits since 7th of May 2025.

CrowdSec has not observed any significant exploitation activity targeting CVE-2025-30567 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.

Attackers exploit this vulnerability by first triggering the archive generation via the wp01_generate_zip_archive action, then downloading sensitive files from /wp-content/wp01-backup/wp-01-passwd.zip without authorization.

lock

Full Intelligence Available

Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.

EventDate
CVE Published2025-03-25
Rule Released2025-05-07

Related Weaknesses

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

arrow_forward

Remediation & Protection

lock to download blocklists, subscribe to firewalls, and access IP intelligence.

External References