14 matches found
CVE-2025-4190
CVE-2025-4190 — WordPress CSV Mass Importer ≤ 1.2 任意文件上传 -purple 📌 描述 CSV Mass Importer 插件（≤ 1.2）存在一个 管理员+ 任意文件上传 漏洞。 由于对上传文件验证不当，高权限用户（如管理员）可以在服务器上上传任意文件 ，即使在应受限制的场景下（例如多站点设置）也不例外。 攻击者可利用此漏洞上传 PHP 木马或恶意文件，从而在服务器上实现远程代码执行（RCE） 。 由Nxploited（Khaled Alenazi） 发现。 🔥 详情 插件名称： CSV Mass Importer 受影响版本： ≤...
WordPress CSV Mass Importer plugin <= 1.2 - Admin+ Arbitrary File Upload vulnerability
Admin+ Arbitrary File Upload vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin CSV Mass Importer versions = 1.2...
CVE-2025-4190
The CSV Mass Importer WordPress plugin through 1.2 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to for example in multisite setup...
CVE-2025-4190
The CSV Mass Importer WordPress plugin through 1.2 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to for example in multisite setup...
CVE-2025-4190
The CSV Mass Importer WordPress plugin through 1.2 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to for example in multisite setup...
CVE-2025-4190
The CSV Mass Importer WordPress plugin (versions ≤ 1.2 ) contains an Arbitrary File Upload vulnerability due to insufficient validation of uploaded files. This allows high-privilege users, such as administrators, to upload unauthorized files to the server, which is particularly relevant in multis...
CVE-2025-4190 CSV Mass Importer <= 1.2 - Admin+ Arbitrary File Upload
The CSV Mass Importer WordPress plugin through 1.2 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to for example in multisite setup...
CVE-2025-4190 CSV Mass Importer <= 1.2 - Admin+ Arbitrary File Upload
The CSV Mass Importer WordPress plugin through 1.2 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to for example in multisite setup...
PT-2025-21780 · WordPress · Csv Mass Importer
Name of the Vulnerable Software and Affected Versions: CSV Mass Importer WordPress plugin versions 1.2 and earlier Description: The issue concerns the CSV Mass Importer WordPress plugin, which does not properly validate uploaded files. This allows high-privilege users, such as administrators, to...
WordPress plugin CSV Mass Importer 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2025-4190: Undefined Security Weakness
The CSV Mass Importer WordPress plugin through 1.2 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to for example in multisite setup...
Exploit for CVE-2025-4190
CVE-2025-4190 — WordPress CSV Mass Importer ≤ 1.2 Arbitrary Fi...
