cbcvebase.

Anthonyeden Restful Content Syndication vulnerabilities

1 known vulnerability affecting anthonyeden/restful_content_syndication.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2025-12171P2HIGHCVSS 8.8≥ 1.1.0, ≤ 1.5.02025-11-01
CVE-2025-12171 [HIGH] CWE-434 CVE-2025-12171: The RESTful Content Syndication plugin for WordPress is vulnerable to arbitrary file uploads due to The RESTful Content Syndication plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ingest_image() function in versions 1.1.0 to 1.5.0. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote
nvd
Anthonyeden Restful Content Syndication vulnerabilities | cvebase