← WordPress Vulnerabilities
WordPress security by component

VidMov

VidMov is a WordPress component with 4 published CVE records in this archive. The latest tracked vulnerability was published Jan 08, 2026; the highest CVE/CNA score is 8.8.

Theme slug: vidmov

CVE-2025-67914: VidMov: Filesystem traversal

VidMov is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.

PublishedJan 08, 2026
Safe version guidanceSee mitigation notes
Safe version
Jan 08, 2026 CVE-2025-67914
VidMov: Filesystem traversal
VidMov is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
See mitigation notes
CVE7.7
NVDPending
Aug 14, 2025 CVE-2025-25172
VidMov: Filesystem traversal
VidMov is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
See mitigation notes
CVE8.1
NVDPending
Jun 28, 2025 CVE-2025-6381
BeeTeam368 Extensions: Filesystem traversal
BeeTeam368 Extensions is affected by filesystem traversal. Exploitation requires at least subscriber-level access. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
See mitigation notes
CVE8.8
NVDPending
Jun 28, 2025 CVE-2025-6379
BeeTeam368 Extensions Pro: Filesystem traversal
BeeTeam368 Extensions Pro is affected by filesystem traversal. Exploitation requires at least subscriber-level access. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
See mitigation notes
CVE8.8
NVDPending