Aller au contenu
Se connecter
8.8 Élevée

CVE-2025-15700 The AWP Classifieds WordPress plugin before 4.4.9 does not validate the type of files extracted from an uploaded ZIP…

Description

The AWP Classifieds WordPress plugin before 4.4.9 does not validate the type of files extracted from an uploaded ZIP archive during its listing-import feature, allowing users with the AWP Classifieds WordPress plugin before 4.4.9's management capability to upload arbitrary PHP files to a publicly accessible, network-shared directory and achieve remote code execution.

Produits et versions touchés

Produit Versions touchées Corrigé en
AWP Classifieds 4.4 premières → < 4.4.9 4.4.9

Autres CVE de AWP Classifieds

Les 2 CVE de AWP Classifieds →
CVE-2026-96904 The AWP Classifieds WordPress plugin before 4.4.9 does not verify that a request is authorised to view a listing when… 5.3 Moyenne
Suivre cette CVE