CVE-2025-64253: Wordpress.org Health Check & Troubleshooting

Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days.

Path Traversal: '.../...//' vulnerability in WordPress.org Health Check & Troubleshooting health-check allows Path Traversal.This issue affects Health Check & Troubleshooting: from n/a through <= 1.7.1.

Affected products

• Wordpress.org Health Check & Troubleshooting: up to and including 1.7.1

Published 2025-12-16. Last modified 2026-06-17.