CVE-2025-48090 | CocoBasic Blanka Plugin up to 1.5 on WordPress path traversal

November 6, 2025 Yanac

A vulnerability was found in CocoBasic Blanka Plugin up to 1.5 on WordPress. It has been classified as critical. This vulnerability affects unknown code. Performing manipulation results in path traversal: ‘…/…//’.

This vulnerability is known as CVE-2025-48090. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More