ionCube Tester Plus

ionCube Tester Plus has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 9.1, and the most serious one scores 9.1 out of 10. Severity breakdown: 1 critical and 0 high.

The most common weakness is Path Traversal, behind 1 of the records (100%).

The one issue recorded for ionCube Tester Plus has a vendor fix available, so running the current release closes it.

All of these findings were reported by Jarno Vos (jarnovos). ionCube Tester Plus is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSCritical

9.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all ionCube Tester Plus vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.1CVE-2025-69411

ionCube Tester Plus <= 1.3 - Unauthenticated Arbitrary File Download

Read the full analysis

Vulnerability Records

1 records


2026-03-04 00:00	ionCube Tester Plus <= 1.3 - Unauthenticated Arbitrary File Download ionCube Tester Plus <= 1.3	`CVE-2025-69411`	9.1 Critical	Jarno Vos (jarnovos)	Yes

Showing 1–1 of 1 reports

Latestv1.5

ionCube Tester Plus

Author

Robert Seyfriedsberger

5.0(2)

100/100

Last Updated

2026-01-11 (8mo ago)

Active Installs

300+

Downloads

20,057

Requires WP

2.2+

Requires PHP

Tested up to

WP 6.9.7

Created

2013-05-30 (14y ago)

ionCube encoder is an established industry standard solution for PHP encoding. In order to run encrypted files on your webserver, it has have ionCube encoders installed. This plugin checks if this is true and if not, you are given a guidance through the official loader wizard which determines what exactly has to be installed on your server on how this can be achieved (if you are not admin of your webserver, you are given instructions which you can easily forward to your admin).

View on WordPress.org