8.8
Élevée
CVE-2025-4954 The Axle Demo Importer WordPress plugin through 1.0.3 does not validate files to be uploaded, which could allow…
Description
The Axle Demo Importer WordPress plugin through 1.0.3 does not validate files to be uploaded, which could allow authenticated users (author and above) to upload arbitrary files such as PHP on the server
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Axle Demo Importer 1.0 | premières → 1.0.3 | Pas de correctif indiqué |