Plattform
wordpress
Komponente
sneeit-framework
Behoben in
8.3.1
CVE-2025-6389 is a critical Remote Code Execution (RCE) vulnerability discovered in the Sneeit Framework WordPress plugin. This vulnerability allows unauthenticated attackers to execute arbitrary code on a vulnerable server. It affects versions 0.0.0 through 8.3 of the plugin, and a fix is available in version 8.4.
The impact of this vulnerability is severe. An attacker can leverage the RCE to gain complete control over the affected WordPress website. This includes the ability to install malicious software, steal sensitive data (user credentials, database information, customer data), modify website content, and potentially pivot to other systems on the network. The lack of authentication required for exploitation significantly broadens the attack surface, making it accessible to a wide range of threat actors. Successful exploitation could lead to a complete compromise of the web server and associated data.
This vulnerability is considered highly exploitable due to the lack of authentication and the ease of code execution. Public proof-of-concept (PoC) code is likely to emerge quickly, increasing the risk of widespread exploitation. The vulnerability was publicly disclosed on 2025-11-25. Monitor security advisories and threat intelligence feeds for any indications of active exploitation campaigns targeting this vulnerability.
WordPress websites utilizing the Sneeit Framework plugin, particularly those running older, unpatched versions (0.0.0–8.3), are at significant risk. Shared hosting environments where multiple websites share the same server are especially vulnerable, as a compromise of one site could potentially lead to the compromise of others.
• wordpress / composer / npm:
grep -r 'sneeit_articles_pagination_callback()' /var/www/html/wp-content/plugins/
wp plugin list | grep sneeit• generic web:
curl -I https://your-wordpress-site.com/wp-content/plugins/sneeit-framework/ | grep sneeit_articles_pagination_callback()disclosure
Exploit-Status
EPSS
1.33% (80% Perzentil)
CISA SSVC
CVSS-Vektor
The primary mitigation is to immediately upgrade the Sneeit Framework plugin to version 8.4 or later. If an immediate upgrade is not possible due to compatibility issues or breaking changes, consider temporarily disabling the plugin. Web application firewalls (WAFs) configured with rules to block suspicious requests targeting the sneeitarticlespagination_callback() function can provide a temporary layer of protection. Regularly review WordPress plugin installations and remove any unused or outdated plugins to reduce the overall attack surface.
Update to version 8.4, or a newer patched version
Schwachstellenanalysen und kritische Warnungen direkt in deinen Posteingang.
CVE-2025-6389 is a critical Remote Code Execution vulnerability in the Sneeit Framework WordPress plugin, allowing attackers to execute code on the server.
If you are using Sneeit Framework WordPress plugin versions 0.0.0 through 8.3, you are affected by this vulnerability.
Upgrade the Sneeit Framework plugin to version 8.4 or later to remediate the vulnerability. Consider disabling the plugin temporarily if upgrading is not immediately possible.
While active exploitation is not yet confirmed, the vulnerability is considered highly exploitable and PoCs are likely to emerge, increasing the risk of exploitation.
Refer to the Sneeit Framework plugin's official website or WordPress plugin repository for the latest advisory and update information.
Lade deine Abhängigkeitsdatei hoch und erfahre sofort, ob dich diese und andere CVEs treffen.
Lade deine Abhängigkeitsdatei hoch und erfahre sofort, ob dich diese und andere CVEs treffen.