CVE-2025-39470
Path Traversal: '.../...//' vulnerability in ThimPress Ivy School allows PHP Local File Inclusion.This issue affects Ivy School: from n/a through 1.6.0.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.1
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS probability
- 0.65%
- CWE
- CWE-35
- Published
- 2025-04-18
- Last modified
- 2026-03-13
Affected products
- ThimPress Ivy School
Weakness type
Related vulnerabilities
- CVE-2026-85310 — WordPress Groundhogg plugin <= 4.7.1 - Path Traversal vulnerability
- CVE-2026-20513 — In Audio HAL, there is a possible information disclosure due to improper input validation. This...
- CVE-2026-56089 — Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low...
- CVE-2026-59909 — Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low...
- CVE-2026-28157 — WordPress Do Lasso plugin <= 358 - Path Traversal vulnerability
- CVE-2026-69109 — A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The...
- CVE-2026-13716 — Path Traversal: '.../...//' in Crafty Controller
- CVE-2026-59115 — Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability