CVE-2018-25329

Description

WordPress Plugin WP with Spritz 1.0 contains a remote file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by injecting file paths into the url parameter. Attackers can send GET requests to wp.spritz.content.filter.php with malicious url values to access sensitive files like system configuration and credentials.

Overview

State

—

Assigner (CNA)

—

CVSS severity

high

CVSS score

7.5 / 10

CVSS vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Effective score

7.5 / 10 HIGH source: CNA overview

CWE(s)

—

Reserved

—

Published

—

Last updated

—

Source

https://www.tenable.com/cve/CVE-2018-25329

Linked Threat

CVE-2018-25329 — WP with Spritz <= 1.0 - Unauthenticated Local File Inclusion

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published

2026-05-17 13:16:44 UTC

NVD last modified

2026-05-18 17:05:46 UTC

NVD CVSS v3.1

7.5 / 10 HIGH source: disclosure@vulncheck.com

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability subscore

3.9 / 10

Impact subscore

3.6 / 10

EPSS score

0.0004 (probability of exploitation in next 30 days)

EPSS percentile

11.88% vs all CVEs — higher = more likely to be exploited, as of 2026-06-03

NVD-assigned CWE(s): CWE-98 (differs from the CNA list above)

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID

EUVD-2018-21851

Assigner

VulnCheck

Published

May 17, 2026, 12:11:34 PM

Updated

May 18, 2026, 2:38:08 PM

EUVD base score (CVSS 4.0)

8.7 / 10
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

EUVD-reported EPSS

0.0400

Vendors

wp-with-spritz

Products

WP with Spritz (1.0)

Aliases

GHSA-538v-9qx2-525c

ENISA description: WordPress Plugin WP with Spritz 1.0 contains a remote file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by injecting file paths into the url parameter. Attackers can send GET requests to wp.spritz.content.filter.php with malicious url values to access sensitive files like system configuration and credentials.

Vendor references (0)

References embedded in the original CVE record by the assigning CNA.

None in the CVE record.

Web references (6)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

• https://downloads.wordpress.org/plugin/wp-with-spritz.zip tenable:downloads.wordpress.org
• https://nvd.nist.gov/vuln/detail/CVE-2018-25329 tenable:nvd.nist.gov
• https://www.cve.org/CVERecord?id=CVE-2018-25329 tenable:www.cve.org
• https://www.exploit-db.com/exploits/44544 tenable:www.exploit-db.com
• https://www.first.org/epss/ tenable:www.first.org
• https://www.vulncheck.com/advisories/wordpress-plugin-wp-with-spritz-remote-file-inclusion tenable:www.vulncheck.com

Indicators (1)

IOCs linked to the auto-promoted Threat row.

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

• Wordfence remediation: WP with Spritz
  Wordfence

  No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.

  2026-07-30 02:53 UTC
• N-central third-party software patch list
  web:documentation.n-able.com

  For more information on how Patch Manager provides third-party patching, see Patching third-party software. Use the table's InstallerURLs location when configuring vendor and patch exclusions in your firewalls and other web-monitoring software.

  2026-05-26 02:57 UTC
• Feedly Patch Tuesday Report—searchable, scannable, and exportable
  web:feedly.com

  15-Second summary Keeping up with Microsoft's Patch Tuesday releases is time-consuming for analysts, who need to assess vulnerabilities quickly, determine their relevance and criticality, and prioritize remediation—all while under pressure to protect their organizations. With Feedly's free Patch Tuesday report, you can: View charts breaking down the vulnerabilities by attack type and ...

  2026-05-26 02:57 UTC
• WP with Spritz Plugin Vulnerability (CVE-2018-25329) | Freshy
  web:freshysites.com

  Security Alert Summary The WP with Spritz plugin contains a remote file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by injecting file paths into a URL parameter. Attackers can send specially crafted GET requests to a plugin PHP endpoint to access sensitive files such as system configuration and credentials. CVE Details CVE

  2026-05-26 02:57 UTC
• NVD - Home
  web:nvd.nist.gov

  The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation of vulnerability management, security measurement, and compliance. The NVD includes databases of security checklist references, security-related software flaws, product names, and impact metrics. For ...

  2026-05-26 02:57 UTC
• Microsoft Patch Tuesday March 2026 - 78 Vulnerabilities Fixed ...
  web:cybersecuritynews.com

  Microsoft released its March 2026 Patch Tuesday security update on March 10, 2026, addressing 78 vulnerabilities across Windows, Microsoft Office, Azure, SQL Server, and .NET. The update includes one actively exploited zero-day vulnerability and multiple Critical-rated flaws demanding immediate attention from security teams. The most urgent fix this month is CVE -2026-21262, the sole zero-day ...

  2026-05-26 02:57 UTC
• ArcGIS Server Security 2025 Update 2 Patch - Esri Support
  web:support.esri.com

  BUG-000153493 - Installing ArcGIS Server Security 2022 Update 1 Patch or Update 2 Patch on ArcGIS Server 10.8.1 affects the access to existing Workflow Manager (Classic) feature services. BUG-000153438 - ArcGIS Server services folders become inaccessible in the REST endpoint if it has a dot (.) in the name and the Security patches are installed.

  2026-05-26 02:57 UTC
• Microsoft May 2026 Patch Tuesday Fixes 130+ Vulnerabilities ... - LinkedIn
  web:www.linkedin.com

  Microsoft has released its May 2026 Patch Tuesday security updates, addressing more than 130 vulnerabilities across its software ecosystem, including Windows, Microsoft Office, SharePoint Server ...

  2026-05-26 02:57 UTC
• Oracle Critical Patch Update Advisory - April 2026
  web:www.oracle.com

  This Critical Patch Update contains 481 new security patches across the product families listed below. Please note that an MOS note summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at April 2026 Critical Patch Update: Executive Summary and Analysis.

  2026-05-26 02:57 UTC
• Patch Tuesday 2025 Year In Review | Tenable®
  web:www.tenable.com

  With another year of Patch Tuesday releases behind us, Microsoft has yet to break its 2020 record with 1,245 CVE's patched. However, this is the second year in a row that Microsoft crossed the 1,000 CVE threshold, and the third time since Patch Tuesday's inception. In 2025, Microsoft broke its record for the most CVEs patched in a month twice.

  2026-05-26 02:57 UTC
• Security Update Guide - Microsoft
  web:portal.msrc.microsoft.com

  The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

  2026-05-26 02:57 UTC

Only Available for Registered Users. Sign in to view.