CVE-2019-25727 | WordPress Plugin ad manager wd 1.0.11 contains an arbitrary … | CVSS 9.8 CRITICAL

Description

WordPress Plugin ad manager wd 1.0.11 contains an arbitrary file download vulnerability that allows unauthenticated attackers to download sensitive files by manipulating the path parameter. Attackers can send GET requests to the edit.php endpoint with export=export_csv and a malicious path parameter to read arbitrary files like wp-config.php accessible to the web server.

Metadata

CVE ID: CVE-2019-25727
State: PUBLISHED
Assigner: VulnCheck
Reserved: 2026-06-04 10:38 UTC
Published: 2026-06-04 13:22 UTC
Last updated: 2026-06-04 13:42 UTC
Primary CWE: CWE-22
Improper Limitation of a Pathname to a Restricted Directory …
Vendor / Product: ad-manager-wd / Ad Manager WD
Sources: cve.org · NVD

Severity & Metrics

9.8 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: none
Automatable: yes
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
ad-manager-wd	Ad Manager WD	—	1.0.11

Weakness (CWE)

CWE	Source	Description
CWE-22	cna	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSS scores (2)

Score	Severity	Version	Source	Vector
9.8	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.3	CRITICAL	4.0	cna	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References (3)

ExploitDB-46252 https://www.exploit-db.com/exploits/46252
Official Product Homepage https://web-dorado.com/products/wordpress-ad-manager-wd.html
VulnCheck Advisory: WordPress Plugin ad manager wd 1.0.11 Arbitrary File Download https://www.vulncheck.com/advisories/wordpress-plugin-ad-manager-wd-arbitrary-file-download