Skip to content
OpenAdvisories

Vendor

storychief

1 known vulnerabilities.

Products

StoryChief 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-7441 Public exploit EPSS 51%

    StoryChief <= 1.0.42 - Unauthenticated Arbitrary File Upload

    The StoryChief plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 1.0.42. This vulnerability occurs through the /wp-json/storychief/webhook REST-API endpoint that does not have sufficient filetype validation. Th…

    storychief StoryChief Web / CMS