✕

Rewterz Annual Threat Intelligence Report 2025 - Download Now

Request a Demo
Rewterz

Dell PowerScale Bug Enables Unauthorized Access

June 7, 2025
Rewterz

Gh0st RAT – Active IOCs

June 8, 2025

Multiple WordPress Plugins Vulnerabilities

Severity

High

Analysis Summary

CVE-2023-25995 CVSS:7.5

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in choicehomemortgage AI Mortgage Calculator allows PHP Local File Inclusion. This issue affects AI Mortgage Calculator: from n/a through 1.0.1.

CVE-2023-26003 CVSS:7.6

mproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in vipul Jariwala WP Post Corrector allows SQL Injection. This issue affects WP Post Corrector: from n/a through 1.0.2.

Impact

  • Gain Access
  • Data Manipulation

Indicators of Compromise

CVE

  • CVE-2023-25995

  • CVE-2023-26003

Affected Vendors

  • WordPress

Affected Products

  • choicehomemortgage AI Mortgage Calculator - n/a
  • vipul Jariwala WP Post Corrector - n/a

Remediation

Update the WordPress plugin to the latest available version.

CVE-2023-25995

CVE-2023-26003

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo