CVE-2025-61318

Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability. This vulnerability stems from the admin/template.php component and the admin/plugin.php component. They fail to perform path verification and dangerous code filtering for deletion parameters, allowing attackers to exploit this feature for directory traversal.

• CWE-24

• https://github.com/AndyNull/em/blob/main/emlog%20pro%20-%20del%20vuln.mdExploit, Third Party Advisory

Published

Dec 8, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-6131A vulnerability, which was classified as problematic, was fo…4.8
• CVE-2025-61310A reflected cross-site scripted (XSS) vulnerability in the a…6.1
• CVE-2025-61311A reflected cross-site scripted (XSS) vulnerability in the d…7.3
• CVE-2025-61312A reflected cross-site scripted (XSS) vulnerability in the a…7.3
• CVE-2025-61313A reflected cross-site scripted (XSS) vulnerability in the d…7.3
• CVE-2025-61314A reflected cross-site scripted (XSS) vulnerability in the d…7.3
• CVE-2025-61319ReNgine thru 2.2.0 is vulnerable to a Stored Cross-Site Scri…6.1
• CVE-2025-6132A vulnerability has been found in Chanjet CRM 1.0 and classi…9.8
• CVE-2025-6133A vulnerability was found in Projectworlds Life Insurance Ma…9.8
• CVE-2025-61330A hard-coded weak password vulnerability has been discovered…6.5
• CVE-2025-6134A vulnerability was found in Projectworlds Life Insurance Ma…9.8
• CVE-2025-6135A vulnerability was found in Projectworlds Life Insurance Ma…9.8