Medium · 6.5 CVE-2025-53561 EUVD-2025-25333GHSA-c486-jq8r-c3c8

WordPress Prevent files / folders access Plugin <= 2.6.0 - Path Traversal Vulnerability

Published Aug 20, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: miniOrange Product: Prevent files / folders access

Description

Path Traversal: '.../...//' vulnerability in miniOrange Prevent files / folders access prevent-file-access allows Path Traversal.This issue affects Prevent files / folders access: from n/a through <= 2.6.0.

Affected products

Vendor	Product	Affected	Fixed
miniOrange	Prevent files / folders access	≤ 2.6.0	—

References

https://patchstack.com/database/Wordpress/Plugin/prevent-file-access/vulnerability/wordpress-prevent-files-folders-access-plugin-2-6-0-path-traversal-vulnerability?_s_id=cve vdb-entry