Skip to content
OpenAdvisories

Product · josxha

Restrict File Access

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2025-6070

    Restrict File Access <= 1.1.2 - Authenticated (Subscriber+) Arbitrary File Read

    The Restrict File Access plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.2 via the output() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the c…

    josxha Restrict File Access Web / CMS