CVE-2025-10306 is a CWE-73 vulnerability in the Backup Bolt WordPress plugin affecting all versions up to 1.4.1. It allows authenticated users with Administrator or higher privileges to perform arbitrary file downloads outside the webroot and write backup zip files to arbitrary file system locations via the process_backup_batch() function. The vulnerability stems from insufficient validation of file paths, enabling external control of file names or paths. The CVSS 3.1 base score is 3.8, reflecting low severity with network attack vector, low complexity, high privileges required, no user interaction, and limited confidentiality and integrity impact.

An attacker with Administrator-level access can download files outside the webroot and write backup files to arbitrary locations on the server. This could lead to unauthorized disclosure of sensitive files and potential overwriting of files, but does not affect system availability. The overall impact is limited due to the requirement for high privileges and no known exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict Administrator-level access to trusted users only and monitor for suspicious activity related to backup operations. Avoid using vulnerable versions of the Backup Bolt plugin if possible.