WordPress Plugin Vulnerabilities

JCH Optimize 4.2.1 - 5.0.0 - Admin+ Path Traversal

Description

The plugin does not properly restrict a directory path provided to one of its administrative image-browsing features to within the site, allowing high-privilege users, administrators on single-site and sub-site administrators on multisite, to enumerate directories and file names outside the web root.

Proof of Concept

Affects Plugins

Plugin icon
jch-optimize
Fixed in 5.0.1

References

CVE
CVE-2025-15693

Classification

Type
TRAVERSAL
OWASP top 10
A1: Injection
CWE
CWE-22
CVSS
2.7 (low)

Miscellaneous

Original Researcher
Krugov Artyom
Submitter
Krugov Aryom
Submitter website
https://cleantalk.org
Verified
Yes
WPVDB ID
73e664a8-9075-4fe6-9af4-b6f5d2ccfe3c

Timeline

Publicly Published
2026-09-03 (about 1 day ago)
Added
2026-09-03 (about 1 day ago)
Last Updated
2026-09-03 (about 1 day ago)

Other

Published
Title
Published
2024-06-06
Title
Photo Gallery by 10Web – Mobile-Friendly Image Gallery < 1.8.24 - Authenticated (Contributor+) Path Traversal via esc_dir Function
Published
2022-10-28
Title
Ultimate Member < 2.5.1 - Admin+ RCE
Published
2026-06-04
Title
Printcart Web to Print Product Designer for WooCommerce <= 2.8.10 - Unauthenticated Folder Content Disclosure via Path Traversal
Published
2022-08-29
Title
WPvivid Backup 0.9.76 - Admin+ Arbitrary File Deletion
Published
2024-08-16
Title
BackWPup < 4.0.2 - Admin+ Directory Traversal