Skip to content
OpenAdvisories

Archive

6 December 2025

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-12673 Public exploit

    Flex QR Code Generator <= 1.2.7 - Unauthenticated Arbitrary File Upload

    The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the update_qr_code() function in all versions up to, and including, 1.2.7. This makes it possible for unauthenticated attackers to u…