Skip to content
OpenAdvisories
Medium · 6.2 CVE-2025-15066 EUVD-2025-205542GHSA-69jh-5qjp-fcx9

Arbitrary File Download through Path Traversal in Innorix WP

Published Dec 29, 2025 · Updated Dec 29, 2025 · Assigned by FSI

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Missing Authorization vulnerability in Innorix WP allows Path Traversal.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory where the product is installed (ex: innorix/exam)

Affected products

VendorProductAffectedFixed
Innorix Innorix WP — —

References