CVE-2025-30567 PoC — WordPress WP01 plugin <= 2.6.2 - Arbitrary File Download Vulnerability

Source

https://github.com/realcodeb0ss/CVE-2025-30567-PoC

Associated Vulnerability

Title: WordPress WP01 plugin <= 2.6.2 - Arbitrary File Download Vulnerability (CVE-2025-30567)
Description:Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP01 WP01 wp01 allows Path Traversal.This issue affects WP01: from n/a through <= 2.6.2.

Description

CVE-2025-30567 - WordPress WP01 < Path traversal

Readme

# CVE-2025-30567 PoC


![Screenshot 2025-04-04 014703](https://github.com/user-attachments/assets/f51ca206-9eb1-4a7b-8ea5-11aca3fdeb86)


CVE-2025-30567 - WordPress WP01 &lt; Path traversal

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →