Логотип exploitDog
bind:CVE-2025-4190
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-4190

Количество 2

Количество 2

nvd логотип

CVE-2025-4190

9 месяцев назад

The CSV Mass Importer WordPress plugin through 1.2 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

CVSS3: 7.2
EPSS: Низкий
github логотип

GHSA-7rm6-cjw9-cf8v

9 месяцев назад

The CSV Mass Importer WordPress plugin through 1.2 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

CVSS3: 7.2
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-4190

The CSV Mass Importer WordPress plugin through 1.2 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

CVSS3: 7.2
0%
Низкий
9 месяцев назад
github логотип
GHSA-7rm6-cjw9-cf8v

The CSV Mass Importer WordPress plugin through 1.2 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

CVSS3: 7.2
0%
Низкий
9 месяцев назад

Уязвимостей на страницу