Threats tagged 'ghsa-c6v2-f464-375q'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.2%	CVE-2025-12563The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to limited file upload due to Medium4.3EPSS 0.2%2025-11-06GCVE DatabaseCVE-2025-12563 The Blog2Social WordPress plugin (up to version 8.6.0) has a vulnerability that allows authenticated users with Subscriber-level access or higher to upload mp4 files to the uploads directory due to improper capability checks in the uploadVideo() function. This could lead to limited file upload abuse. EPSS 0.2%Report on CVE-2025-12563 Vulnerability CWE-862 #ghsa-c6v2-f464-375q	GCVE Database	2025-11-06

Page 1 of 1