CVE-2025-8385 | Zombify Plugin up to 1.7.5 on WordPress zf_get_file_by_url path traversal

A vulnerability classified as critical has been found in Zombify Plugin up to 1.7.5 on WordPress. Affected by this issue is the function zf_get_file_by_url. The manipulation leads to path traversal.

This vulnerability is traded as CVE-2025-8385. It is possible to initiate the attack remotely. There is no exploit available.