Critical · 10.0 CVE-2025-47637 EUVD-2025-28106GHSA-gpxh-j79m-whcj

WordPress STAGGS plugin <= 2.11.0 - Arbitrary File Upload Vulnerability

Published May 23, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Unrestricted Upload of File with Dangerous Type vulnerability in STAGGS STAGGS staggs allows Upload a Web Shell to a Web Server.This issue affects STAGGS: from n/a through <= 2.11.0.

Affected products

Vendor	Product	Affected	Fixed
STAGGS	STAGGS	≤ 2.11.0	—

References

https://patchstack.com/database/Wordpress/Plugin/staggs/vulnerability/wordpress-staggs-2-10-1-arbitrary-file-upload-vulnerability?_s_id=cve vdb-entry