Files
CVEs-PoC/2025/CVE-2025-8422.md
T
2025-09-29 21:09:30 +02:00

949 B

CVE-2025-8422

Description

The Propovoice: All-in-One Client Management System plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.7.6.7 via the send_email() function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.

POC

Reference

No PoCs from references.

Github