The BeeTeam368 Extensions Pro plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.4 via the handle_live_fn() function. This vulnerability allows authenticated attackers with Subscriber-level access and above to perform actions on files outside of the intended directory. It can be exploited to delete critical files like wp-config.php, potentially leading to a complete site takeover.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-6379 |
Exploitation
To exploit this vulnerability, an attacker with Subscriber-level access can craft a request that targets the handle_live_fn() function, allowing them to traverse directories and access files outside the intended directory structure. This could lead to the deletion of critical files such as wp-config.php, enabling further attacks or complete control over the WordPress site.
Affected Products
- BeeTeam368 Extensions Pro plugin for WordPress (all versions up to 2.3.4) – vulnerable to directory traversal attacks.
Mitigation
To mitigate this vulnerability, it is recommended to update the BeeTeam368 Extensions Pro plugin to the latest version. Additionally, restricting file permissions and implementing security measures such as web application firewalls can help protect against unauthorized access.