CNNVD-202601-2933 Information

Jan 17, 2026 cve

CNNVD ID

CNNVD-202601-2933

CVE-2025-13725

  • CNNVD Published: 2026-01-17

Description (Chinese)

WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台具有在基于PHP和MySQL的服务器上架设个人博客网站的功能。WordPress plugin是一个应用插件。 WordPress plugin Gutenberg Thim Blocks – Page Builder, Gutenberg Blocks for the Block Editor 1.0.1及之前版本存在路径遍历漏洞，该漏洞源于路径验证不足，可能导致经过身份验证的攻击者通过iconSVG参数读取服务器上的任意文件内容。

Description (English)

WordPress and WordPressplugin are products of WordPress. WordPress is a blog platform developed in the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL-based servers. WordPress plugin is an application plugin. WordPress plugin Gutenberg Thim Blocks – Page Builder, Gutenberg Blocks for the Block Editor 1.0 and previous versions have path-to-way loopholes, which stem from inadequate path verification and may lead the identityed assailant to read any file on the server through iconSVG parameters.

Hazard Level

High

Vulnerability Type

路径遍历

Affected Vendor

WordPress

Published

2026-01-17

Last Modified

2026-02-24

References

https://plugins.trac.wordpress.org/browser/thim-blocks/tags/1.0.1/inc/Gutenberg/Blocks/Icon/IconBlockType.php#L92 https://plugins.trac.wordpress.org/browser/thim-blocks/tags/1.0.1/inc/Gutenberg/Blocks/Icon/IconBlockType.php#L97 https://plugins.trac.wordpress.org/browser/thim-blocks/trunk/inc/Gutenberg/Blocks/Icon/IconBlockType.php#L92 https://plugins.trac.wordpress.org/browser/thim-blocks/trunk/inc/Gutenberg/Blocks/Icon/IconBlockType.php#L97 https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3419638%40thim-blocks&new=3419638%40thim-blocks&sfp_email=&sfph_mail= https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3424998%40thim-blocks&new=3424998%40thim-blocks&sfp_email=&sfph_mail= https://www.wordfence.com/threat-intel/vulnerabilities/id/80de464f-a4b0-4aaf-8869-f8d29a422bdb?source=cve https://access.redhat.com/security/cve/cve-2025-13725

Patch

https://wordpress.org/plugins/thim-blocks

Share on: