Skip to content
OpenAdvisories

Archive

9 September 2025

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Low 3.8
    CVE-2025-8889 Public exploit

    Compress Then Upload < 1.0.5 - Admin+ Arbitrary File Upload

    The Compress & Upload WordPress plugin before 1.0.5 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)