Skip to content
OpenAdvisories
High · 7.5 CVE-2025-31635 EUVD-2025-17503GHSA-2vh9-v4w6-7xrh

WordPress CLEVER plugin <= 2.6 - Arbitrary File Download Vulnerability

Published Jun 9, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in LambertGroup CLEVER lbg-audio11-html5-shoutcast_history allows Path Traversal.This issue affects CLEVER: from n/a through <= 2.6.

Affected products

VendorProductAffectedFixed
LambertGroup CLEVER ≤ 2.6 —

References