CVE-2025-10050

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-10050", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-09-05T18:55:18.588Z", "datePublished": "2025-09-17T01:49:16.544Z", "dateUpdated": "2026-04-08T17:16:32.498Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:16:32.498Z"}, "affected": [{"vendor": "eskapism", "product": "Developer Loggers for Simple History", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "0.5", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Developer Loggers for Simple History plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 0.5 via the enabled_loggers parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included."}], "title": "Developer Loggers for Simple History <= 0.5 - Authenticated (Admin+) Local File Inclusion", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b2ea3a9e-2a9a-4628-8ea1-e18e756f915f?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3361543%40developer-loggers-for-simple-history&new=3361543%40developer-loggers-for-simple-history&sfp_email=&sfph_mail="}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "cweId": "CWE-22", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 6.6, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "Jonas Benjamin Friedli"}], "timeline": [{"time": "2025-09-16T00:00:00.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-09-17T13:10:22.333533Z", "id": "CVE-2025-10050", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-17T13:10:31.308Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-10050", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-09-17T13:10:22.333533Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-17T13:10:25.512Z"}}], "cna": {"title": "Developer Loggers for Simple History <= 0.5 - Authenticated (Admin+) Local File Inclusion", "credits": [{"lang": "en", "type": "finder", "value": "Jonas Benjamin Friedli"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 6.6, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "eskapism", "product": "Developer Loggers for Simple History", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "0.5"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-09-16T00:00:00.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b2ea3a9e-2a9a-4628-8ea1-e18e756f915f?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3361543%40developer-loggers-for-simple-history&new=3361543%40developer-loggers-for-simple-history&sfp_email=&sfph_mail="}], "descriptions": [{"lang": "en", "value": "The Developer Loggers for Simple History plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 0.5 via the enabled_loggers parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:16:32.498Z"}}}, "cveMetadata": {"cveId": "CVE-2025-10050", "state": "PUBLISHED", "dateUpdated": "2026-04-08T17:16:32.498Z", "dateReserved": "2025-09-05T18:55:18.588Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-09-17T01:49:16.544Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Developer Loggers for Simple History", "vendor": "eskapism", "versions": [{"lessThanOrEqual": "0.5", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Developer Loggers for Simple History plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 0.5 via the enabled_loggers parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included."}, {"lang": "es", "value": "El plugin Developer Loggers for Simple History para WordPress es vulnerable a la inclusi\u00f3n local de ficheros en todas las versiones hasta la 0.5, inclusive, a trav\u00e9s del par\u00e1metro enabled_loggers. Esto hace posible que atacantes autenticados, con acceso de nivel de Administrador y superior, incluyan y ejecuten ficheros .php arbitrarios en el servidor, permitiendo la ejecuci\u00f3n de cualquier c\u00f3digo PHP en esos ficheros. Esto puede usarse para eludir controles de acceso, obtener datos sensibles o lograr la ejecuci\u00f3n de c\u00f3digo en casos donde los tipos de fichero .php pueden ser cargados e incluidos."}], "id": "CVE-2025-10050", "lastModified": "2026-09-26T00:10:00.127", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.7, "impactScore": 5.9, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-10050", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-09-17T13:10:22.333533Z", "version": "2.0.3"}}]}, "published": "2025-09-17T02:15:32.327", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3361543%40developer-loggers-for-simple-history&new=3361543%40developer-loggers-for-simple-history&sfp_email=&sfph_mail="}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b2ea3a9e-2a9a-4628-8ea1-e18e756f915f?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-21T19:04:19.722812+00:00", "value": {"mitigation_remediation": ["Upgrade the plugin to a version newer than 0.5 once the vendor releases a fix", "If an upgrade is not available, disable the enabled_loggers feature or remove the parameter from the plugin\u2019s configuration code", "Restrict file uploads to non\u2011PHP types and enforce strict file permissions on the web\u2011root directory", "Audit the plugin source for other potential inclusion points and ensure that all user\u2011controlled inputs are properly sanitized"], "summary": {"action": "Patch", "impact": "Local File Inclusion enabling code execution"}, "threat_synthesis": {"affected_systems": "WordPress sites that have the eskapism Developer Loggers for Simple History plugin of version 0.5 or earlier and for which the enabled_loggers feature is active are vulnerable to this Local File Inclusion vulnerability when accessed by users with Administrator-level privileges or higher.", "description_and_impact": "The Developer Loggers for Simple History plugin for WordPress is vulnerable to Local File Inclusion through the enabled_loggers parameter. Administrators and users with higher privileges can inject arbitrary .php files, causing the server to execute any PHP code contained within those files. This allows attackers to bypass access controls, read sensitive data, or fully compromise the site by running malicious scripts.", "risk_and_exploitability": "The CVSS score of 6.6 indicates moderate severity, while the EPSS score of less than 1% shows that the likelihood of exploitation is low. The vulnerability is not listed in the CISA KEV catalog. Because it requires authenticated access with Administrator-level privileges, the attack vector is local to the site\u2019s administrative interface, specifically the enabled_loggers parameter in the plugin\u2019s settings."}}}}, "created": "2025-09-17T10:52:00.651160+00:00", "updated": "2026-04-21T19:15:26.028591+00:00", "vendors": ["eskapism", "eskapism$PRODUCT$developer_loggers_for_simple_history_plugin", "wordpress", "wordpress$PRODUCT$wordpress"]}