CVE-2025-56431

Directory Traversal vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a remote attacker to cause a denial of service via the…

High · published December 10, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
57.8
In the wild
Unconfirmed
What it is

⚡ A sneaky directory traversal flaw in FearlessCMS could send your server into a tailspin! Think of it like a delivery driver who finds a way to sneak into the back of a restaurant and cause a kitchen disaster — the service is overwhelmed and unable to serve customers. An attacker could exploit this vulnerability to create a denial of service, causing your website to crash and become unavailable. This means lost traffic, frustrated users, and potential revenue down the drain. What's worse? It only takes a crafty approach to bring everything to a halt.

Put simply

Think of it like a delivery driver who finds a way to sneak into the back of a restaurant and cause a kitchen disaster — the service is overwhelmed and unable to serve customers. This directory traversal vulnerability in FearlessCMS allows attackers to manipulate the file_get_contents() function in plugin-handler.php, leading to a denial of service condition.

What to do

An attacker could exploit this vulnerability to create a denial of service, causing your website to crash and become unavailable. This means lost traffic, frustrated users, and potential revenue down the drain. What's worse? It only takes a crafty approach to bring everything to a halt. To protect your site, update FearlessCMS to the latest version available as soon as possible. Additionally, consider implementing more stringent input validation to ensure that file paths cannot be manipulated. Regularly audit your plugins to catch any other potential vulnerabilities! You've got this! With a few updates and some vigilance, you can keep your site running smoothly and securely. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00851 · 57.8th percentile
Published
2025-12-10T00:00Z
EPSS history
Timeline
  • 10 DEC 00:00Z
    Directory Traversal vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a remote attacker to cause a denial of service via the…
    cvelistv5