Beveiligingsadvies

CVE-2025-4954

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-06-10 06:00:11

Laatst bijgewerkt 2025-06-11 13:30:26

Toegewezen door WPScan

CVSS-score 8.8

Status PUBLISHED

Beschrijving

The Axle Demo Importer WordPress plugin through 1.0.3 does not validate files to be uploaded, which could allow authenticated users (author and above) to upload arbitrary files such as PHP on the server

← Alle CVE's bekijken Bekijk op cve.org ↗