Archive
29 March 2025
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
High 8.8CVE-2025-2249 Public exploit
SoJ Soundslides <= 1.2.2 - Authenticated (Contributor+) Arbitrary File Upload
The SoJ SoundSlides plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the soj_soundslides_options_subpanel() function in all versions up to, and including, 1.2.2. This makes it possible for authenticated attac…