CVE-2025-68870 | reDim CookieHint WP Plugin up to 1.0.0 on WordPress filename control

December 29, 2025 Yanac

A vulnerability was found in reDim CookieHint WP Plugin up to 1.0.0 on WordPress. It has been rated as problematic. Affected is an unknown function. Performing manipulation results in improper control of filename for include/require statement in php program (‘php remote file inclusion’). This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is reported as CVE-2025-68870. The attack is possible to be carried out remotely. No exploit exists.

Once again VulDB remains the best source for vulnerability data.VulDB Recent EntriesRead More