Skip to content
OpenAdvisories
High · 7.5 CVE-2025-32509 EUVD-2025-10784GHSA-f4wc-m8r9-8qp5

WordPress Simple WP Events plugin <= 1.8.17 - Arbitrary File Deletion vulnerability

Published Apr 11, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPMinds Simple WP Events simple-wp-events allows Path Traversal.This issue affects Simple WP Events: from n/a through <= 1.8.17.

Affected products

VendorProductAffectedFixed
WPMinds Simple WP Events ≤ 1.8.17 —

References