TI-2018-15554 CVE-2018-25329 · GHSA-538v-9qx2-525cWordPress Plugin WP with Spritz 1.0 Remote File InclusionPriority HIGH 77WordPress Plugin WP with Spritz 1.0 contains a remote file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by injecting file paths into the url parameter.CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00403 · Published 2026-05-17 · No fix listed CWE-98