CVE-2025-12846

creationtimestamp| type| source ---|---|--- 2025-11-11 12:02:50+00:00| seen| https://gist.github.com/Darkcrai86/8a673562062795d45f0e4258e1e6a96a 2025-11-11 12:55:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5e6o7km2l2u 2025-11-11 14:06:18+00:00| seen|...

WordPress Blocksy Companion plugin <= 2.1.19 - Authenticated (Author+) Arbitrary File Upload via SVG Upload Bypass vulnerability

Authenticated Author+ Arbitrary File Upload via SVG Upload Bypass vulnerability discovered by shark3y in WordPress Plugin Blocksy Companion versions = 2.1.19...