WordPress CLEVER plugin <= 2.6 - Arbiträres Herunterladen von Dateien Schwachstelle

The Arbitrary File Access vulnerability allows an attacker to bypass intended security restrictions and read files outside of the intended directory. This could expose sensitive data such as configuration files, database credentials, or even source code. Successful exploitation could lead to complete compromise of the WordPress instance and potentially the underlying server. While the specific impact depends on the files accessible, the potential for data exfiltration and system takeover is significant. This vulnerability shares similarities with other path traversal exploits where attackers manipulate file paths to gain unauthorized access.

Websites and applications utilizing CLEVER versions 0.0.0 through 2.6 are at risk. This includes organizations using CLEVER for audio streaming or related functionalities. Shared hosting environments where CLEVER is installed are particularly vulnerable, as a compromise of one site could potentially impact others.

• wordpress / composer / npm:

grep -r "../" /var/www/html/clever/*

• generic web:

curl -I 'http://your-clever-site/../../../../etc/passwd' # Check for file access

1. 2025-06-09Disclosure

   disclosure

1. Reserviert2025-03-31
2. Veröffentlicht2025-06-09
3. Geändert2026-04-28
4. EPSS aktualisiert2026-03-23

The primary mitigation for CVE-2025-31635 is to upgrade CLEVER to version 2.7 or later, which contains the fix. If an immediate upgrade is not possible, implement temporary workarounds. Restrict file access permissions within the CLEVER plugin directory to minimize potential damage. Thoroughly validate all user-supplied input to prevent path manipulation. Consider implementing a Web Application Firewall (WAF) with rules to block suspicious path traversal attempts. Regularly review and audit file access logs for any anomalous activity.