CVE-2025-53326 is a Local File Inclusion (LFI) vulnerability in CodeYatri Gutenify plugin versions up to and including 1.5.4, which could allow an attacker to include arbitrary files on the server. This flaw is rated 7.5 HIGH on the CVSS scale, indicating high impacts on confidentiality, integrity, and availability, and requires low privileges but high attack complexity for a network-based exploit. While not listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, it is marked as "Active" on a hot list. However, there is no public exploit code, community discussion, or media coverage, and its EPSS score suggests a very low probability of exploitation in the wild.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| CodeYatri | Gutenify | >= 0, <= 1.5.4CNA affecteddefault unaffected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.