CVE-2025-8889

漏洞利用标题：WordPress Compress Then Upload Plugin 1.0.3 任意文件上传至远程代码执行 日期： 2025-07-23 漏洞利用作者： Muhammed Çelik 厂商主页： https://wordpress.com/plugins/compress-then-upload 软件链接： https://downloads.wordpress.org/plugin/compress-then-upload.latest-stable.zip 版本： 1.0.3 测试环境： Debian, WordPress 6.8.1, Apache 2.4.6...

WordPress Compress Then Upload plugin < 1.0.5 - Admin+ Arbitrary File Upload vulnerability

Admin+ Arbitrary File Upload vulnerability discovered by Muhammed Çelik in WordPress Plugin Compress Then Upload versions 1.0.5...

CVE-2025-8889 Compress Then Upload < 1.0.5 - Admin+ Arbitrary File Upload

The Compress & Upload WordPress plugin before 1.0.5 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to for example in multisite setup...

Exploit for CVE-2025-8889

Exploit Title: WordPress Compress Then Upload Plugin 1.0.3 Arb...