How severe is CVE-2025-49451?

High severity. CVSS v3 base score is 7.5 out of 10.

Path Traversal in Yannisraft Aeroscroll Gallery – Infinite Scroll Image & Post Grid With Photo

Q: What is CVE-2025-49451?

CVE-2025-49451 is a high-severity vulnerability in Yannisraft Aeroscroll Gallery – Infinite Scroll Image & Post Grid With Photo, classified under Path Traversal: '.../...//'. CVSS score: 7.5/10. Published 2025-06-17.

CVE-2025-49451

Path Traversal: '.../...//' vulnerability in yannisraft Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid with Photo Gallery aeroscroll-gallery allows Path Traversal.This issue affects Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid with Photo Gallery: from n/a through <= 1.0.13.

EPSS: 0.004 (36.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Yannisraft Aeroscroll Gallery – Infinite Scroll Image & Post Grid With Photo — versions 0

Weakness classification (CWE)

CWE-35 — Path Traversal: '.../...//'

References

audit@patchstack.com (vdb-entry)

Frequently asked questions

What is CVE-2025-49451?: CVE-2025-49451 is a high-severity vulnerability in Yannisraft Aeroscroll Gallery – Infinite Scroll Image & Post Grid With Photo, classified under Path Traversal: '.../...//'. CVSS score: 7.5/10. Published 2025-06-17.
How severe is CVE-2025-49451?: High severity. CVSS v3 base score is 7.5 out of 10.