PT-2025-48709
CVE-2025-12630
·
Publicado
2025-09-29
·
Atualizado
2026-09-25
Descrição por
CVSS 3.1
4.9
MédiaMétricasAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Upload.am WordPress plugin versions prior to 1.0.1
Description
The software contains a flaw where a missing capability check on an AJAX request handler allows users with contributor-level permissions to view site options. This could lead to unauthorized information disclosure.
Recommendations
Update to version 1.0.1 or later.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾