CVE-2025-9516 – Atec Debug Plugin Arbitrary File Read Vulnerability in WordPress

CVE ID : CVE-2025-9516

Published : 4 сентября 2025 г. 7:10 | 2 часа ago

Description : The atec Debug plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.2.22 via the ‘custom_log’ parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to view the contents of files outside of the originally intended directory.

Severity: 4.9 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…