Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2025-4564 — AI Deep Analysis Summary

CVSS 9.8 · Critical

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: Path Traversal in 'TicketBAI Facturas para WooCommerce'. 💥 **Consequences**: Arbitrary file deletion due to insufficient path validation. Critical integrity loss.

Q2Root Cause? (CWE/Flaw)

🛡️ **Root Cause**: CWE-22 (Path Traversal). ❌ **Flaw**: Inadequate validation of file paths allows attackers to traverse directories.

Q3Who is affected? (Versions/Components)

🏢 **Affected**: WordPress Plugin: 'TicketBAI Facturas para WooCommerce'. 📦 **Versions**: 3.18 and earlier. Vendor: facturaone.

Q4What can hackers do? (Privileges/Data)

🔓 **Capabilities**: Delete arbitrary files on the server. 📉 **Impact**: High Confidentiality, Integrity, and Availability impact (CVSS H).

Q5Is exploitation threshold high? (Auth/Config)

🔑 **Threshold**: Low. 🌐 **Access**: Network (AV:N), Low Complexity (AC:L), No Privileges (PR:N), No User Interaction (UI:N). Easy to exploit.

Q6Is there a public Exp? (PoC/Wild Exploitation)

📜 **Exploit Status**: No public PoC listed in data. 👀 **Status**: References available (Wordfence, WP Trac), but active wild exploitation not confirmed yet.

Q7How to self-check? (Features/Scanning)

🔍 **Check**: Scan for installed plugin 'TicketBAI Facturas para WooCommerce'. 📊 **Verify**: Check version number. If ≤ 3.18, you are vulnerable.

Q8Is it fixed officially? (Patch/Mitigation)

✅ **Fix**: Update plugin to version > 3.18. 🔗 **Source**: See WP Trac changeset 3292061 for official patch details.

Q9What if no patch? (Workaround)

🚧 **Workaround**: Disable the plugin immediately if update is not possible. 🛑 **Mitigation**: Remove plugin files if not needed. Block access to plugin endpoints.

Q10Is it urgent? (Priority Suggestion)

⚡ **Priority**: HIGH. 🚨 **Reason**: CVSS 9.8 (Critical). No auth required. Direct file deletion risk. Patch immediately.