CVE-2025-39475 PUBLISHED

WordPress Arlo <= 6.0.3 - Local File Inclusion Vulnerability

Assigner: Patchstack
Reserved: 16.04.2025 Published: 09.06.2025 Updated: 10.06.2025

Path Traversal vulnerability in Frenify Arlo allows PHP Local File Inclusion. This issue affects Arlo: from n/a through 6.0.3.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 8.1

Product Status

Vendor Frenify
Product Arlo
Versions Default: unaffected
  • affected from n/a to 6.0.3 (incl.)

Credits

  • Bonds (Patchstack Alliance) finder

References

Problem Types

  • CWE-35 Path Traversal CWE

Impacts

  • CAPEC-252 PHP Local File Inclusion