CVE-2025-13065

Name of the Vulnerable Software and Affected Versions WordPress Starter Templates versions up to and including 4.4.41

Description The Starter Templates plugin for WordPress is susceptible to arbitrary file upload due to inadequate file type validation when handling WXR files. This allows files with double extensions to bypass sanitization, enabling authenticated attackers with author-level access or higher to upload arbitrary files to the server. Successful exploitation may lead to remote code execution.

Recommendations Update the Starter Templates plugin to a version newer than 4.4.41.