CVE-2025-14867 | liangshao Flashcard Plugin for WordPress up to 0.9 on WordPress Shortcode flashcard path traversal

A vulnerability categorized as critical has been discovered in liangshao Flashcard Plugin for WordPress up to 0.9 on WordPress. Affected by this issue is the function flashcard of the component Shortcode Handler. Executing a manipulation can lead to path traversal.

This vulnerability is tracked as CVE-2025-14867. The attack can be launched remotely. No exploit exists.