Auth bypass in Innorix Wp
CVE-2025-15066
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Missing Authorization vulnerability in Innorix WP allows Path Traversal.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory where the product is installed (ex: innorix/exam)
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.001 (4.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.2 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Innorix Wp — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-15066?
- CVE-2025-15066 is a medium-severity vulnerability in Innorix Wp, classified under Path Traversal. CVSS score: 6.2/10. Published 2025-12-29.
- How severe is CVE-2025-15066?
- Medium severity. CVSS v3 base score is 6.2 out of 10.