The vulnerability identified as CVE-2025-64230 involves improper limitation of a pathname to a restricted directory (path traversal) in the WP Chill Filr plugin, specifically in the filr-protection component. This flaw allows an attacker with low privileges to traverse directories beyond intended boundaries, potentially leading to denial of service conditions. The affected versions include all releases up to and including 1.2.10. The CVSS 3.1 base score is 7.7, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and a scope change with impact limited to availability.

The impact of this vulnerability is primarily on availability, as indicated by the CVSS vector and score. There is no impact on confidentiality or integrity. An attacker could exploit this path traversal to disrupt the normal operation of the affected software, potentially causing denial of service. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor WP Chill's official channels for updates. Until a fix is available, consider restricting access to the affected plugin or limiting privileges to reduce exposure.