CVE-2025-56430

Directory Traversal vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a remote attacker to cause a denial of service via the…

High · published December 10, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
57.8
In the wild
Unconfirmed
What it is

⚡ A crafty directory traversal vulnerability is hiding in FearlessCMS v.0.0.2-15 that lets attackers rain down a denial of service! 🚨 Think of this like a mischievous kid who finds a way to sneak into a restricted area of an amusement park, causing a massive ride shutdown—making everyone grumpy and ruining the fun! An attacker could exploit this vulnerability to trigger a denial of service, effectively shutting down your site and leaving users in the lurch. Imagine your website going dark just when customers are most eager to engage—absolutely devastating for your reputation!

Put simply

Think of this like a mischievous kid who finds a way to sneak into a restricted area of an amusement park, causing a massive ride shutdown—making everyone grumpy and ruining the fun! This directory traversal vulnerability allows remote attackers to manipulate the deleteDirectory function in plugin-handler.php, causing a denial of service by deleting critical directories.

What to do

An attacker could exploit this vulnerability to trigger a denial of service, effectively shutting down your site and leaving users in the lurch. Imagine your website going dark just when customers are most eager to engage—absolutely devastating for your reputation! To protect yourself, patch to the latest version of FearlessCMS immediately and consider implementing strict input validation to prevent unauthorized directory access. Regularly monitor your system for unusual activity to catch potential exploits early! You’ve got this! Follow these steps to fortify your defenses and keep your website safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00851 · 57.8th percentile
Published
2025-12-10T00:00Z
EPSS history
Timeline
  • 10 DEC 00:00Z
    Directory Traversal vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a remote attacker to cause a denial of service via the…
    cvelistv5