Is CVE-2025-3295 actively exploited?

CVE-2025-3295 has no public evidence of in-the-wild exploitation as of 2025-07-09.

What is the CVSS score for CVE-2025-3295?

CVE-2025-3295 has a CVSS score of 4.9 (MEDIUM severity). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N.

How do I patch CVE-2025-3295?

Patch guidance is available from benjaminrojas security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2025-3295.

Which products are affected by CVE-2025-3295?

1 product: benjaminrojas wp editor.

CVE-2025-3295 - remediation guidance & executive summary

Description

The WP Editor plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.2.9.1. This makes it possible for authenticated attackers, with Administrator-level access and above, to read arbitrary files on the affected site's server which may reveal sensitive information.

CVSS Metrics

Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack Vector: network
Complexity: low
Privileges: high
User Action: none
Scope: unchanged
Confidentiality: high
Integrity: none
Availability: none
Weaknesses: CWE-22 · Path Traversal

Metadata

Primary Vendor: BENJAMINROJAS
Published: 4/17/2025
Last Modified: 7/9/2025
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

benjaminrojas : wp_editor

Remediation Guidance

Executive Summary

Cite this page

CVE-2025-3295. CVEDatabase.com. Retrieved 1 May 2026. https://cvedatabase.com/cve/CVE-2025-3295

View on NIST NVD

CVE-2025-3295 vulnerability