CVE-2025-12673

🗓️ 06 Dec 2025 05:49:25Reported by WordfenceType

cve🔗 web.nvd.nist.gov👁 18 Views🌐 WEB

CVE-2025-12673: Flex QR Code Generator for WordPress up to 1.2.6 allows unauthenticated arbitrary file uploads via update_qr_code, risking remote code execution.

Reporter	Title	Published	Views	Family All 11
GithubExploit	Exploit for CVE-2025-12673	6 Nov 202515:55	–	githubexploit
Circl	CVE-2025-12673	6 Dec 202506:54	–	circl
CNNVD	WordPress plugin Flex QR Code Generator 代码问题漏洞	6 Dec 202500:00	–	cnnvd
Cvelist	CVE-2025-12673 Flex QR Code Generator <= 1.2.7 - Unauthenticated Arbitrary File Upload	6 Dec 202505:49	–	cvelist
EUVD	EUVD-2025-201530	6 Dec 202506:30	–	euvd
NVD	CVE-2025-12673	6 Dec 202506:15	–	nvd
Patchstack	WordPress Flex QR Code Generator plugin <= 1.2.7 - Arbitrary File Upload vulnerability	8 Dec 202506:45	–	patchstack
Positive Technologies	PT-2025-49333	6 Dec 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-12673	7 Dec 202506:05	–	redhatcve
Vulnrichment	CVE-2025-12673 Flex QR Code Generator <= 1.2.7 - Unauthenticated Arbitrary File Upload	6 Dec 202505:49	–	vulnrichment

Vulners

Node

ajitdas flex_qr_code_generatorRange≤1.2.7wordpress

[
  {
    "vendor": "ajitdas",
    "product": "Flex QR Code Generator",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.2.7",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/3d71404e-0db8-485b-a626-5e0df2076c05
plugins	www.plugins.trac.wordpress.org/changeset/3412218
ryankozak	www.ryankozak.com/posts/cve-2025-12673/
plugins	www.plugins.trac.wordpress.org/browser/flex-qr-code-generator/trunk/qr-code-generator.php
github	www.github.com/d0n601/CVE-2025-12673

Parameter	Position	Path	Description	CWE
logo	binary	/wp-admin/admin-ajax.php	Unauthenticated arbitrary file upload via update_qr_code (no file type validation) leading to potential remote code execution.	CWE-434

15 Apr 2026 00:35Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.19.8

EPSS0.00373

SSVC

CWE-434