CVE-2025-15066 — Arbitrary File Download through Path Traversal in Innorix WP
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Missing Authorization vulnerability in Innorix WP allows Path Traversal.This issue affects Innori…
Published: 2025-12-29 · CVSS: 6.9 · CVSS 4.0
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Missing Authorization vulnerability in Innorix WP allows Path Traversal.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory where the product is installed (ex: innorix/exam)
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7