CVE-2025-8420

creationtimestamp| type| source ---|---|--- 2025-08-06 03:01:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvpabkhg7f2m 2025-08-06 05:28:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvpiiiwcnd2k 2025-08-11 01:48:32+00:00| published-proof-of-concept|...

CVE-2025-8420 Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution

Multiple plugins for WordPress by emarket-design with the 'emd-form-builder-lite' package are vulnerable to Remote Code Execution in various versions via the emdformbuilderlitepagenum function. This is due to the plugin not properly validating user input before using it as a function name. This...