Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Code Explorer plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.6 via the 'file' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2025-15487 The Code Explorer plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.6 via the 'file' parameter. This makes it possible fo… https://www.cve.org/CVERecord?id=CVE-2025-15487
Post summary
The Code Explorer WordPress plugin (v1.4.6 and earlier) has a path traversal flaw exposed through the 'file' parameter, as recorded in CVE-2025-15487.
CVE-2025-15487 Path Traversal in WordPress Code Explorer Plugin Versions 1.4.6 and Below https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-15487
Post summary
The text announces a Path Traversal vulnerability (CVE-2025-15487) affecting WordPress Code Explorer Plugin v1.4.6 and below, with no PoC, exploit, or patch information provided.