Vulnerability in Techlabpro1 Review Schema – & Structure Data Plugin
CVE-2025-1707
The Review Schema plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.2.4 via post meta. This makes it possible for authenticated attackers, with contributor-level and above permissions, to in…
EPSS: 0.006 (43.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Techlabpro1 Review Schema – & Structure Data Plugin — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-1707?
- CVE-2025-1707 is a high-severity vulnerability in Techlabpro1 Review Schema – & Structure Data Plugin, classified under PHP Remote File Inclusion. CVSS score: 8.8/10. Published 2025-03-11.
- How severe is CVE-2025-1707?
- High severity. CVSS v3 base score is 8.8 out of 10.