PT-2025-17049 · Unknown · Theme File Duplicator

·

CVE-2025-27282

·

Published

2025-04-17

·

Updated

2025-04-19

CVSS v3.1

9.9

Critical

VectorAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Theme File Duplicator versions 1.3 and earlier
Description The issue allows for the unrestricted upload of files with dangerous types, enabling the use of malicious files.
Recommendations For Theme File Duplicator versions 1.3 and earlier, consider restricting file uploads to only allow safe file types until a patch is available.

Fix

Unrestricted File Upload

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-27282

Affected Products

Theme File Duplicator