Security Advisory
CVE-2025-13070
6.6
MEDIUM
Vulnerability Description
The CSV to SortTable WordPress plugin through 4.2 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as contributor to perform LFI attacks.
Published Date
December 9, 2025
Official Source
NIST NVD Advisory