CVE-2025-48130

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spicethemes Spice Blocks spice-blocks allows Path Traversal.This issue affects Spice Blocks: from n/a through <= 2.0.7.4.

Overview

State: PUBLISHED
Assigner (CNA): Patchstack
CVSS severity: HIGH
CVSS score: 7.5 / 10
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Effective score: 7.5 / 10 HIGH source: CNA overview
CWE(s): CWE-22
Reserved: 2025-05-15
Published: 2025-06-09 17:54 UTC
Last updated: 2026-04-28 18:12 UTC
Source: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48130.json
Linked Threat: CVE-2025-48130 — Spice Blocks <= 2.0.7.4 - Unauthenticated Arbitrary File Download

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published: 2025-06-09 16:15:43 UTC
NVD last modified: 2026-06-17 09:29:12 UTC
NVD CVSS v3.1: 7.5 / 10 HIGH source: audit@patchstack.com
NVD CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability subscore: 3.9 / 10
Impact subscore: 3.6 / 10
EPSS score: 0.0043 (probability of exploitation in next 30 days)
EPSS percentile: 35.17% vs all CVEs — higher = more likely to be exploited, as of 2026-08-01

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID: EUVD-2025-17530
Assigner: Patchstack
Published: Jun 9, 2025, 3:54:01 PM
Updated: Apr 28, 2026, 4:12:52 PM
EUVD base score (CVSS 3.1): 7.5 / 10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EUVD-reported EPSS: 0.5000
Vendors: spicethemes
Products: Spice Blocks (n/a ≤2.0.7.2)

Spice Blocks (0 ≤2.0.7.4)
Aliases: GHSA-2v6g-667x-w6wm

ENISA description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spicethemes Spice Blocks spice-blocks allows Path Traversal.This issue affects Spice Blocks: from n/a through <= 2.0.7.4.

EUVD references (1)

https://patchstack.com/database/Wordpress/Plugin/spice-blocks/vulnerability/wordpress-spice-blocks-2-0-7-2-arbitrary-file-download-vulnerability?_s_id=cve

Affected products (1)

Vendor	Product	Versions	Platforms
spicethemes	Spice Blocks	`0` (affected)	—

Vendor references (1)

References embedded in the original CVE record by the assigning CNA.

https://patchstack.com/database/Wordpress/Plugin/spice-blocks/vulnerability/wordpress-spice-blocks-2-0-7-2-arbitrary-file-download-vulnerability?_s_id=cve vdb-entry

MITRE references (1) cveawg.mitre.org

Pulled from MITRE's CVE Services API by the 🛰 Backfill from MITRE button.

https://patchstack.com/database/Wordpress/Plugin/spice-blocks/vulnerability/wordpress-spice-blocks-2-0-7-2-arbitrary-file-download-vulnerability?_s_id=cve vdb-entry

Web references (5)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

http://cwe.mitre.org/data/definitions/22.html rapid7:cwe.mitre.org
https://attackerkb.com/topics/CVE-2025-48130 rapid7:attackerkb.com
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-17530 rapid7:euvd.enisa.europa.eu
https://www.cve.org/CVERecord?id=CVE-2025-48130 rapid7:www.cve.org
https://www.wordfence.com/threat-intel/vulnerabilities/id/d6203331-4fe0-4eba-bbe7-52a55549fd25?source=api-prod rapid7:www.wordfence.com

NVD-tagged references (1)

Reference list NVD curates from the CNA record, vendor advisories, and third-party reports. The tag chips below are NVD's analyst-assigned categories.

https://patchstack.com/database/Wordpress/Plugin/spice-blocks/vulnerability/wordpress-spice-blocks-2-0-7-2-arbitrary-file-download-vulnerability?_s_id=cve audit@patchstack.com

Indicators (3)

IOCs linked to the auto-promoted Threat row.

Type	Value	VirusTotal	Attached
domain	`traversal.this`	no local data	2026-05-18 21:19 UTC
ipv4	`2.0.7.4`	no local data	2026-05-18 21:19 UTC
cve	`CVE-2025-48130`	no local data	2026-06-06 13:42 UTC

Remediations (17)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

Wordfence remediation: Spice Blocks

Wordfence

Update to version 2.0.7.5, or a newer patched version

2026-06-06 13:42 UTC
AI drives new debate around CISA software patching deadlines

web:federalnewsnetwork.com

CISA this year has already started accelerating the deadlines for agencies to patch software bugs posted to the Known Exploited Vulnerabilities (KEV) catalog.

2026-05-22 14:04 UTC
New BitUnlocker Attack Bypasses Windows 11 Disk Encryption in Just 5 ...

web:cyberpress.org

A newly published proof-of-concept tool called BitUnlocker exposes a dangerous downgrade attack that can bypass Microsoft's BitLocker full-disk encryption on fully patched Windows 11 machines, granting complete access to encrypted drives in under five minutes. The attack exploits CVE - 2025 -48804, a vulnerability in Windows BitLocker that allows an attacker to mix untrusted data with trusted ...

2026-05-22 14:04 UTC
Android Security Bulletin—September 2025 - Android Open Source Project

web:source.android.com

Android partners are encouraged to fix all issues in this bulletin and use the latest security patch level. Devices that use the 2025 -09-01 security patch level must include all issues associated with that security patch level, as well as fixes for all issues reported in previous security bulletins.

2026-05-22 14:04 UTC
CVE-2025-48530 - Understanding the OOB Vulnerability Leading to Remote ...

web:www.cve.news

PATCH FAST: Vulnerabilities like CVE - 2025 -48530 are actively exploited soon after disclosure. Bad input shouldn't bring down your apps—or give control to someone halfway across the globe.

2026-05-22 14:04 UTC
National Vulnerability Database | NIST

web:www.nist.gov

NIST maintains the National Vulnerability Database (NVD), a repository of information on software and hardware flaws that can compromise computer security. This is a key piece of the nation's cybersecurity infrastructure.

2026-05-22 14:04 UTC
Oracle Critical Patch Update Advisory - July 2025

web:www.oracle.com

Oracle Critical Patch Update Advisory - July 2025 Description A Critical Patch Update is a collection of patches for multiple security vulnerabilities. These patches address vulnerabilities in Oracle code and in third party components included in Oracle products. These patches are usually cumulative, but each advisory describes only the security patches added since the previous Critical Patch ...

2026-05-22 14:04 UTC
Microsoft Rolls Out Mitigations for 'YellowKey' BitLocker ...

web:www.securityweek.com

Microsoft has announced mitigations for CVE -2026-45585, a BitLocker bypass triggered via FsTx in Windows Recovery.

2026-05-22 03:54 UTC
ArcGIS Server Security 2025 Update 2 Patch - Esri

web:www.esri.com

Key highlights The ArcGIS Server Security 2025 update 2 is available This patch resolves 10 Medium severity vulnerabilities This security patch is cumulative, and includes fixes provided in the ArcGIS Server Security 2025 update 1.

2026-05-22 03:54 UTC
Microsoft Rushes Out Emergency Mitigation For 'YellowKey ... - LinkedIn

web:www.linkedin.com

Microsoft Security Response Center has issued an emergency mitigation for a newly disclosed BitLocker bypass vulnerability known as "YellowKey," after security researchers publicly released ...

2026-05-22 03:54 UTC
Latest Windows Update Problems and How to Fix Them

web:www.maketecheasier.com

Check out the latest Windows 11 and Windows 10 update problems and their solutions, as recommended by Microsoft experts.

2026-05-22 03:54 UTC
VirusTotal - Home

web:www.virustotal.com

Streamline your investigations with Google Threat Intelligence Agentic and the new Dark Web (DDW) module. Perform hunting and pivoting across forums using natural language or specific modifiers. Bridge threat actor identities and map global operations easy.

2026-05-22 03:54 UTC
Microsoft Releases Mitigation for Windows BitLocker Security Bypass 0 ...

web:cybersecuritynews.com

No patch has been released yet; Microsoft has instead issued a multi-step manual mitigation guide while a formal security update is prepared. Windows BitLocker Security Bypass The vulnerability originates in WinRE's handling of the BootExecute registry value under HKLM\ControlSet001\Control\Session Manager.

2026-05-22 03:54 UTC
How to Use Known Issue Rollback to Fix Problems Caused by Windows ...

web:petri.com

If a Group Policy setting is available to roll back a fix , it is included in the Windows Update KB article and release notes as a mitigation for a known issue.

2026-05-22 03:54 UTC
Security Update Guide - Microsoft

web:portal.msrc.microsoft.com

The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

2026-05-22 03:54 UTC
Android Security Bulletin—August 2025 - Android Open Source Project

web:source.android.com

Android partners are encouraged to fix all issues in this bulletin and use the latest security patch level. Devices that use the 2025 -08-01 security patch level must include all issues associated with that security patch level, as well as fixes for all issues reported in previous security bulletins.

2026-05-22 03:54 UTC
Oracle Critical Patch Update Advisory - October 2025

web:www.oracle.com

This Critical Patch Update contains 374 new security patches across the product families listed below. Please note that an MOS note summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at October 2025 Critical Patch Update: Executive Summary and Analysis.

2026-05-22 03:54 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2025-48130.json.

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-48130",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-10T13:42:33.416422Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-10T13:42:41.038Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://wordpress.org/plugins",
          "defaultStatus": "unaffected",
          "packageName": "spice-blocks",
          "product": "Spice Blocks",
          "vendor": "spicethemes",
          "versions": [
            {
              "changes": [
                {
                  "at": "2.0.7.5",
                  "status": "unaffected"
                }
              ],
              "lessThanOrEqual": "2.0.7.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Martino Spagnuolo (r3verii) | Patchstack Bug Bounty Program"
        }
      ],
      "datePublic": "2026-04-01T16:40:39.489Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spicethemes Spice Blocks spice-blocks allows Path Traversal.<p>This issue affects Spice Blocks: from n/a through <= 2.0.7.4.</p>"
            }
          ],
          "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spicethemes Spice Blocks spice-blocks allows Path Traversal.This issue affects Spice Blocks: from n/a through <= 2.0.7.4."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-126",
          "descriptions": [
            {
              "lang": "en",
              "value": "Path Traversal"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-28T16:12:52.327Z",
        "orgId": "21595511-bba5-4825-b968-b78d1f9984a3",
        "shortName": "Patchstack"
      },
      "references": [
        {
          "tags": [
            "vdb-entry"
          ],
          "url": "https://patchstack.com/database/Wordpress/Plugin/spice-blocks/vulnerability/wordpress-spice-blocks-2-0-7-2-arbitrary-file-download-vulnerability?_s_id=cve"
        }
      ],
      "title": "WordPress Spice Blocks plugin <= 2.0.7.4 - Arbitrary File Download vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3",
    "assignerShortName": "Patchstack",
    "cveId": "CVE-2025-48130",
    "datePublished": "2025-06-09T15:54:01.031Z",
    "dateReserved": "2025-05-15T18:01:28.792Z",
    "dateUpdated": "2026-04-28T16:12:52.327Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}