EUVD-2025-4014

Malicious code in bioql PyPI...

CVE-2025-32140 WordPress WP Remote Thumbnail Plugin <= 1.3.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Nirmal Kumar Ram WP Remote Thumbnail allows Upload a Web Shell to a Web Server. This issue affects WP Remote Thumbnail: from n/a through 1.3.1...

CVE-2025-32140

CVE-2025-32140 affects the WordPress plugin WP Remote Thumbnail. Multiple sources confirm a vulnerability in versions up to 1.3.1 (with Patchstack citing 1.3.2 as affected) where an attacker with at least contributor privileges can abuse an unsanitized remote_thumb URL to upload arbitrary files, ...