Skip to content
OpenAdvisories

Vendor

josxha

2 known vulnerabilities.

Products

Restrict File Access 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2025-6070

    Restrict File Access <= 1.1.2 - Authenticated (Subscriber+) Arbitrary File Read

    The Restrict File Access plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.2 via the output() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the c…

    josxha Restrict File Access Web / CMS