Volerion logoVolerion
Volerion logoVolerion

Propovoice WordPress Plugin Arbitrary File Read Vulnerability

Vulnerability

A vulnerability allowing arbitrary file read has been identified in the Propovoice: All-in-One Client Management System plugin for WordPress, affecting all versions through 1.7.6.7. The issue arises in the send_email() function, where unauthenticated attackers can read the contents of arbitrary files on the server, potentially exposing sensitive information.

Impact

Exploitation of this vulnerability allows for unauthorized access to arbitrary files on the server, which could contain sensitive information.

Added: Sep 11, 2025, 8:23 AM
Updated: Sep 11, 2025, 8:23 AM

Vulnerability Rating

Custom Algorithm
spread
1.0
impact
2.5
exploitability
8.2
remediation
0.0
relevance
0.5
threat
3.2
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.