CVE-2025-10686 — Creta Testimonial Showcase < 1.2.4 - Editor+ Local File Inclusion

CVE-2025-10686

Creta Testimonial Showcase < 1.2.4 - Editor+ Local File Inclusion PUBLISHED

Description (CNA)

The Creta Testimonial Showcase WordPress plugin before 1.2.4 is vulnerable to Local File Inclusion. This makes it possible for authenticated attackers, with editor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files.

Affected (CNA)

Vendor / product	Versions
Unknown / Creta Testimonial Showcase	affected 0 before 1.2.4

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/27d58c5a-ab87-41aa-a806-53fa96d4351c/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.