CVE-2025-15066: Innorix Wp

Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Missing Authorization vulnerability in Innorix WP allows Path Traversal.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory where the product is installed (ex: innorix/exam)

Affected products

• Innorix Innorix Wp

Published 2025-12-29. Last modified 2026-10-07.