Threats tagged 'ghsa-5h9q-jf3c-852w'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.8	CVE-2025-12057The WavePlayer WordPress plugin before 3.8.0 does not have authorization in an AJAX action as well as does not Critical9.82025-11-19GCVE DatabaseCVE-2025-12057 The WavePlayer WordPress plugin before 3.8.0 does not have authorization in an AJAX action as well as does not validate the file to be copied locally, allowing unauthenticated users to upload arbitrary file on the server and lead to RCE Report on CVE-2025-12057 Vulnerability CWE-434 #ghsa-5h9q-jf3c-852w	GCVE Database	2025-11-19

Page 1 of 1