{"id":59390,"date":"2025-07-15T03:11:01","date_gmt":"2025-07-15T03:11:01","guid":{"rendered":""},"modified":"2025-08-31T11:54:30","modified_gmt":"2025-08-31T17:54:30","slug":"cve-2025-7327-directory-traversal-vulnerability-in-widget-for-google-reviews-wordpress-plugin","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-7327-directory-traversal-vulnerability-in-widget-for-google-reviews-wordpress-plugin\/","title":{"rendered":"CVE-2025-7327: Directory Traversal Vulnerability in Widget for Google Reviews WordPress Plugin<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The CVE-2025-7327 vulnerability involves the Widget for Google Reviews plugin for WordPress, which has been found susceptible to Directory Traversal. This vulnerability is significant as it affects all versions of the plugin up to 1.0.15. The vulnerability can be exploited by authenticated attackers with Subscriber-level access and above, to include and execute arbitrary files<\/a> on the server. This poses a serious cybersecurity threat as it permits the execution of any PHP code in those files<\/a> and can lead to potential system compromise or data leakage.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-7327
\nSeverity: High (8.8 CVSS Severity Score)
\nAttack Vector: Network
\nPrivileges Required: Low (Subscriber-level access and above)
\nUser Interaction: Required
\nImpact: Execution of arbitrary PHP code, leading to potential system<\/a> compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n