{"id":59390,"date":"2025-07-15T03:11:01","date_gmt":"2025-07-15T03:11:01","guid":{"rendered":""},"modified":"2025-08-31T11:54:30","modified_gmt":"2025-08-31T17:54:30","slug":"cve-2025-7327-directory-traversal-vulnerability-in-widget-for-google-reviews-wordpress-plugin","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-7327-directory-traversal-vulnerability-in-widget-for-google-reviews-wordpress-plugin\/","title":{"rendered":"CVE-2025-7327: Directory Traversal Vulnerability in Widget for Google Reviews WordPress Plugin<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The CVE-2025-7327 vulnerability involves the Widget for Google Reviews plugin for WordPress, which has been found susceptible to Directory Traversal. This vulnerability is significant as it affects all versions of the plugin up to 1.0.15. The vulnerability can be exploited by authenticated attackers with Subscriber-level access and above, to include and execute arbitrary files<\/a> on the server. This poses a serious cybersecurity threat as it permits the execution of any PHP code in those files<\/a> and can lead to potential system compromise or data leakage.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-7327
\nSeverity: High (8.8 CVSS Severity Score)
\nAttack Vector: Network
\nPrivileges Required: Low (Subscriber-level access and above)
\nUser Interaction: Required
\nImpact: Execution of arbitrary PHP code, leading to potential system<\/a> compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

Widget for Google Reviews WordPress Plugin<\/a> | Up to, and including, 1.0.15<\/p>\n

How the Exploit Works<\/strong><\/p>\n

The exploit works by manipulating the ‘layout’ parameter of the plugin<\/a>. An attacker with at least subscriber-level access can leverage this vulnerability to include and execute arbitrary files<\/a> on the server. This includes any PHP code contained within those files, even in cases where only images and other traditionally “safe” file types are allowed<\/a> to be uploaded. This can result in bypassing access controls, obtaining sensitive data, or executing code, ultimately leading to a potential system compromise<\/a> or data leakage.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

Here is a conceptual example of how an HTTP request exploiting this vulnerability<\/a> might look:<\/p>\n

POST \/wp-admin\/admin-ajax.php?action=wprev-slider-preview HTTP\/1.1\nHost: target.example.com\nContent-Type: application\/x-www-form-urlencoded\nlayout=..\/..\/..\/..\/wp-config.php%00<\/code><\/pre>\n
In this example, the attacker attempts to traverse the directory to include the ‘wp-config.php’ file, a critical WordPress configuration file<\/a> containing sensitive information. The inclusion and execution of this file<\/a> could have serious implications, including compromise of the entire system or data leakage.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview The CVE-2025-7327 vulnerability involves the Widget for Google Reviews plugin for WordPress, which has been found susceptible to Directory Traversal. This vulnerability is significant as it affects all versions of the plugin up to 1.0.15. The vulnerability can be exploited by authenticated attackers with Subscriber-level access and above, to include and execute arbitrary files […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[],"vendor":[91],"product":[],"attack_vector":[85],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-59390","post","type-post","status-publish","format-standard","hentry","category-uncategorized","vendor-google","attack_vector-directory-traversal"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t