Description
WordPress Ads-pro 是一款高级广告管理插件，允许用户在 WordPress 网站上轻松管理和展示广告。该插件的 /wp-admin/admin-ajax.php 接口存在文件包含漏洞（CVE-2025-4380），攻击者可以通过该漏洞包含任意文件，可能导致敏感信息泄露或远程代码执行。
WordPress Ads-pro /wp-admin/admin-ajax.php 文件包含漏洞 （CVE-2025-4380）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-4380
https://cloud.projectdiscovery.io/library/CVE-2025-4380
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4380.yaml
https://wpscan.com/vulnerability/63964564-73e6-45e2-8145-33e2e30d1d57/
https://www.ameeba.com/blog/cve-2025-4380-critical-local-file-inclusion-vulnerability-in-ads-pro-plugin-for-wordpress/
https://www.sentinelone.com/vulnerability-database/cve-2025-4380/
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/ap-plugin-scripteo/ads-pro-plugin-multi-purpose-wordpress-advertising-manager-489-unauthenticated-local-file-inclusion
https://nosec.org/m/share/5896.html
https://hackhalt.com/threat/cve-2025-4380/
https://www.incibe.es/index.php/en/incibe-cert/early-warning/vulnerabilities/cve-2025-4380
https://s4e.io/tools/ads-pro-plugin-local-file-inclusion-cve-2025-4380
https://advisories.checkpoint.com/defense/advisories/public/2025/cpai-2025-0695.html/