CVE-2025-3103

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-3103", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-04-01T19:54:20.663Z", "datePublished": "2025-04-19T04:21:14.601Z", "dateUpdated": "2026-04-08T16:33:56.469Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:33:56.469Z"}, "affected": [{"vendor": "LambertGroup", "product": "CLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "2.4", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The CLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon plugin for WordPress is vulnerable to arbitrary file read due to insufficient file path validation in the 'history.php' file in all versions up to, and including, 2.4. This makes it possible for unauthenticated attackers to read arbitrary files on the affected site's server, which may contain sensitive information including database credentials. The vulnerability was partially patched in version 2.4."}], "title": "CLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon <= 2.4 - Unauthenticated Arbitrary File Read", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/0733261f-a2e1-4bd1-a57d-fdaaa8c904db?source=cve"}, {"url": "https://codecanyon.net/item/clever-html5-radio-player-with-history-shoutcast-and-icecast-elementor-widget-addon/26708087#item-description__updates-release-log"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-73 External Control of File Name or Path", "cweId": "CWE-73", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH"}}], "credits": [{"lang": "en", "type": "finder", "value": "Tran Nguyen Bao Khanh (from VCI - VNPT Cyber Immunity)"}], "timeline": [{"time": "2025-04-18T00:00:00.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-04-21T02:40:31.273645Z", "id": "CVE-2025-3103", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-21T02:40:44.904Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-3103", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-04-21T02:40:31.273645Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-21T02:40:40.454Z"}}], "cna": {"title": "CLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon <= 2.4 - Unauthenticated Arbitrary File Read", "credits": [{"lang": "en", "type": "finder", "value": "Tran Nguyen Bao Khanh (from VCI - VNPT Cyber Immunity)"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}}], "affected": [{"vendor": "LambertGroup", "product": "CLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "2.4"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-04-18T00:00:00.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/0733261f-a2e1-4bd1-a57d-fdaaa8c904db?source=cve"}, {"url": "https://codecanyon.net/item/clever-html5-radio-player-with-history-shoutcast-and-icecast-elementor-widget-addon/26708087#item-description__updates-release-log"}], "descriptions": [{"lang": "en", "value": "The CLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon plugin for WordPress is vulnerable to arbitrary file read due to insufficient file path validation in the 'history.php' file in all versions up to, and including, 2.4. This makes it possible for unauthenticated attackers to read arbitrary files on the affected site's server, which may contain sensitive information including database credentials. The vulnerability was partially patched in version 2.4."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-73", "description": "CWE-73 External Control of File Name or Path"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:33:56.469Z"}}}, "cveMetadata": {"cveId": "CVE-2025-3103", "state": "PUBLISHED", "dateUpdated": "2026-04-08T16:33:56.469Z", "dateReserved": "2025-04-01T19:54:20.663Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-04-19T04:21:14.601Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "CLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon", "vendor": "LambertGroup", "versions": [{"lessThanOrEqual": "2.4", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The CLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon plugin for WordPress is vulnerable to arbitrary file read due to insufficient file path validation in the 'history.php' file in all versions up to, and including, 2.4. This makes it possible for unauthenticated attackers to read arbitrary files on the affected site's server, which may contain sensitive information including database credentials. The vulnerability was partially patched in version 2.4."}, {"lang": "es", "value": "El complemento CLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon para WordPress es vulnerable a la lectura arbitraria de archivos debido a una validaci\u00f3n insuficiente de la ruta en el archivo 'history.php' en todas las versiones hasta la 2.4 incluida. Esto permite que atacantes no autenticados lean archivos arbitrarios en el servidor del sitio afectado, que pueden contener informaci\u00f3n confidencial, como credenciales de la base de datos. La vulnerabilidad se corrigi\u00f3 parcialmente en la versi\u00f3n 2.4."}], "id": "CVE-2025-3103", "lastModified": "2026-06-17T09:19:11.557", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-3103", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-04-21T02:40:31.273645Z", "version": "2.0.3"}}]}, "published": "2025-04-19T05:15:44.380", "references": [{"source": "security@wordfence.com", "url": "https://codecanyon.net/item/clever-html5-radio-player-with-history-shoutcast-and-icecast-elementor-widget-addon/26708087#item-description__updates-release-log"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/0733261f-a2e1-4bd1-a57d-fdaaa8c904db?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-73"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-28T18:56:34.887366+00:00", "value": {"mitigation_remediation": ["Upgrade the CLEVER plugin to the latest available release; if version 2.4 is the latest and still vulnerable, use any newer version that fully addresses the path\u2011validation flaw.", "If an upgrade is not immediately possible, remove or disable the history.php file or disable the history feature of the plugin to eliminate the vulnerable endpoint.", "Configure restrictive file\u2011system permissions so that the web server runs with the least privilege necessary, preventing read access to sensitive files such as wp-config.php."], "summary": {"action": "Apply patch", "impact": "Arbitrary file read"}, "threat_synthesis": {"affected_systems": "The flaw exists in the CLEVER \u2013 HTML5 Radio Player With History \u2013 Shoutcast and Icecast \u2013 Elementor Widget Addon plugin for WordPress. All releases up to and including version 2.4 are affected.", "description_and_impact": "The vulnerability (CWE\u201173) allows an unauthenticated attacker to retrieve arbitrary files from the server hosting the WordPress site. A flaw in the plugin\u2019s history.php file fails to validate file paths, enabling an attacker to construct a web request that resolves to any file on the filesystem, potentially exposing sensitive information such as database credentials or other configuration data.", "risk_and_exploitability": "With a CVSS score of 7.5 the issue is classified as high severity. The EPSS score is less than 1%, indicating that the likelihood of exploitation is currently low, and the vulnerability is not listed in the CISA KEV catalog. An attacker can exploit the flaw remotely via a simple web request without requiring authentication, and can target any user who can reach the WordPress installation."}}}}, "created": "2026-04-28T19:00:20.873801+00:00", "updated": "2026-04-28T19:00:20.873813+00:00", "vendors": []}