File and Path Handling

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. WordPress Helpdesk Integration <= 5.8.10 - Unauthenticated Local File InclusionCVE-2025-9990smackcoders · CVSS 8.1 · 1.3% likely

   CWE-98

2. Import Export Suite for CSV and XML Datafeed <= 7.19 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2025-2008smackcoders · CVSS 8.8 · 1.2% likely

   CWE-434

3. Import Export Suite for CSV and XML Datafeed <= 7.19 - Authenticated (Subscriber+) Arbitrary File DeletionCVE-2025-2007smackcoders · CVSS 8.1 · 1.2% likely

   CWE-23

4. WordPress Export All Posts, Products, Orders, Refunds & Users Plugin <= 2.9 - Arbitrary File Read vulnerabilityCVE-2025-24611Smackcoders Inc., · CVSS 4.9 · 0.7% likely

   CWE-22

5. WP Import – Ultimate CSV XML Importer for WordPress <= 7.27 - Authenticated (Subscriber+) Arbitrary File DeletionCVE-2025-10058smackcoders · CVSS 8.1 · 0.6% likely

   CWE-73

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.