CVE-2025-4798 is an arbitrary file read vulnerability in the WP-DownloadManager WordPress plugin (versions up to 1.68.10). The issue arises from insufficient restrictions on the directory selection for storing downloads by administrators, allowing those with Administrator privileges to download and read any file on the server, including sensitive system and configuration files. This vulnerability is classified under CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor). The CVSS 3.1 base score is 4.9 (medium severity), with network attack vector, low attack complexity, and requiring high privileges but no user interaction.

An attacker with Administrator-level access can exploit this vulnerability to read arbitrary files on the server hosting the WordPress site. This may lead to exposure of sensitive information such as system files or configuration data. However, exploitation requires already having high privileges (Administrator), limiting the scope to insider threats or compromised admin accounts. There is no indication of impact on integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict Administrator access to trusted users only and monitor for suspicious activity. Avoid granting Administrator privileges unnecessarily. Review server file permissions to limit exposure where possible.