VULNERABILITY INTELLIGENCE

CVE-2025-4190

CVSS score7.2 HIGH
EPSS probability0.58%
CISA KEVNot currently listed
Published2025-05-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

The CSV Mass Importer WordPress plugin through 1.2 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references