Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-8422 — Propovoice <= 1.7.6.7 - Unauthenticated Arbitrary File Read | Kitploit
Tools/GitHubGitHub/randomrobbiebf/cve-2025-8422
Vulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubrandomrobbiebf/cve-2025-8422

CVE-2025-8422

Propovoice <= 1.7.6.7 - Unauthenticated Arbitrary File Read

View Repository
10 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-8422

Propovoice <= 1.7.6.7 - Unauthenticated Arbitrary File Read

Description

The Propovoice: All-in-One Client Management System plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.7.6.7 via the send_email() function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.

Details

  • Type: plugin
  • Slug: propovoice
  • Affected Version: 1.7.6.7
  • CVSS Score: 7.5
  • CVSS Rating: High
  • CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
  • CVE: CVE-2025-8422
  • Status: Closed

POC

root@kitploit:~
Usage: python3 cve-2025-8422-exploit.py <target_url> <email_recipient> [target_file]

Examples:
  python3 cve-2025-8422-exploit.py https://example.com [email protected]
  python3 cve-2025-8422-exploit.py https://example.com [email protected] /../../../wp-config.php
Download Tool