The vulnerability identified as CVE-2025-30793 involves improper limitation of a pathname to a restricted directory (path traversal) in the Houzez Property Feed plugin of Property Hive. This flaw allows remote attackers to access files outside the intended directory boundaries, potentially exposing sensitive information. The affected versions include all releases up to 2.5.4. The CVSS 3.1 base score is 7.5, reflecting a network attack vector with low complexity and no required privileges or user interaction, impacting confidentiality but not integrity or availability.

Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the affected system, leading to potential exposure of sensitive data. There is no indication of impact on data integrity or system availability. No known active exploitation has been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No temporary or official fixes are currently documented.