CVE-2025-4857

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

The Newsletters plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.9.9 via the 'file' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published
May 31, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-485707.8In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background due to a confused deputy. CVE-2025-485714.3In multiple functions of btm_sec.cc, there is a possible way for an attacker to intercept SMS messages due to a logic error in the code. ThiCVE-2025-485727.8In multiple locations, there is a possible way to launch activities from the background due to a permissions bypass. This could lead to locaCVE-2025-485737.8In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground service while the app is in the background due tCVE-2025-485748.4In validateAddingWindowLw of DisplayPolicy.java, there is a possible way for an app to intercept drag-and-drop events due to a missing permiCVE-2025-485757.8In multiple functions of CertInstaller.java, there is a possible way to install certificates due to a permissions bypass. This could lead toCVE-2025-485765.5In updateNotificationChannelGroupFromPrivilegedListener of NotificationManagerService.java, there is a possible permanent denial of service CVE-2025-485777.4In multiple functions of KeyguardViewMediator.java, there is a possible lockscreen bypass due to a race condition. This could lead to local CVE-2025-485787.8In multiple functions of MediaProvider.java, there is a possible way to bypass the WRITE_EXTERNAL_STORAGE permission due to a missing permisCVE-2025-485798.4In multiple functions of MediaProvider.java, there is a possible external storage write permission bypass due to a confused deputy. This couCVE-2025-48584.8A vulnerability was found in D-Link DAP-2695 120b36r137_ALL_en_20210528. It has been declared as problematic. This vulnerability affects unkCVE-2025-485807.8In connectInternal of MediaBrowser.java, there is a possible way to access while in use permission while the app is in background due to a l
CVE-2025-4857: High severity, CVSS 7.2 | Vulnix