Exploit for CVE-2025-4389

PoC exploit for CVE-2025-4389 is not present in the provided con...

CVE-2025-4389

creationtimestamp| type| source ---|---|--- 2025-05-17 05:38:13+00:00| seen| https://bsky.app/profile/potato.software/post/3lpdtb2d2hl2d 2025-05-17 06:43:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpdwv2zzu72e 2025-05-17 17:01:23+00:00| seen|...

CVE-2025-4389 Crawlomatic Multipage Scraper Post Generator <= 2.6.8.1 - Unauthenticated Arbitrary File Upload

The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the crawlomaticgeneratefeaturedimage function in all versions up to, and including, 2.6.8.1. This makes it possible for unauthenticated attackers to...

WordPress Crawlomatic Multipage Scraper Post Generator plugin <= 2.6.8.1 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Foxyyy in WordPress Plugin Crawlomatic Multisite Scraper Post Generator versions = 2.6.8.1...