Threats tagged 'ghsa-76x3-974v-wx5g'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.2	EPSS 0.7%	CVE-2025-12399The Alex Reservations: Smart Restaurant Booking plugin for WordPress is vulnerable to arbitrary file uploads due to High7.2EPSS 0.7%2025-11-08GCVE DatabaseCVE-2025-12399 The Alex Reservations: Smart Restaurant Booking plugin for WordPress contains a vulnerability in its file upload REST endpoint that allows authenticated administrators to upload arbitrary files. This flaw exists in all versions up to and including 2.2.3 due to missing file type validation. Exploitation could lead to remote code execution on the affected server. EPSS 0.7%Report on CVE-2025-12399 Vulnerability CWE-434 #ghsa-76x3-974v-wx5g	GCVE Database	2025-11-08

Page 1 of 1