CVE-2025-2249

🔐 WordPress SoJ SoundSlides プラグイン ⚠️ 免責事項: このエクスプロイトは教育目的および許可されたテスト目的のみに使用してください。 📌 脆弱性の概要 プラグイン: SoJ SoundSlides 影響を受けるバージョン: = 1.2.2 種類: 認証済み（投稿者以上）任意ファイルアップロード パッチ状況: ❌ 公式修正は提供されていません SoJ SoundSlides プラグインは、投稿者（Contributor）以上の権限を持つ認証済みユーザー による任意の ZIP ファイルのアップロードを許可します。検証が欠如しているため、攻撃者は PHP...

EUVD-2025-8673

Malicious code in bioql PyPI...

CVE-2025-2249

The SoJ SoundSlides plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the sojsoundslidesoptionssubpanel function in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with Contributor-level access and...

CVE-2025-2249

The SoJ SoundSlides plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the sojsoundslidesoptionssubpanel function in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with Contributor-level access and...

CVE-2025-2249

The SoJ SoundSlides WordPress plugin (versions

CVE-2025-2249 SoJ Soundslides <= 1.2.2 - Authenticated (Contributor+) Arbitrary File Upload

The SoJ SoundSlides plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the sojsoundslidesoptionssubpanel function in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with Contributor-level access and...

CVE-2025-2249 SoJ Soundslides <= 1.2.2 - Authenticated (Contributor+) Arbitrary File Upload

The SoJ SoundSlides plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the sojsoundslidesoptionssubpanel function in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with Contributor-level access and...

WordPress plugin SoJ SoundSlides 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

Exploit for CVE-2025-2249

🔐 WordPress SoJ SoundSlides Plugin ⚠️ DISCLAIMER: This ex...

WordPress SoJ Soundslides plugin <= 1.2.2 - Authenticated (Contributor+) Arbitrary File Upload vulnerability

Authenticated Contributor+ Arbitrary File Upload vulnerability discovered by Hoang Phuc Vo HrxKnight in WordPress Plugin SoJ SoundSlides versions = 1.2.2...

PT-2025-13598 · WordPress · Soj Soundslides

Name of the Vulnerable Software and Affected Versions: SoJ SoundSlides plugin for WordPress version 1.2.2 and earlier Description: The SoJ SoundSlides plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the soj soundslides options subpanel function...