Skip to content
OpenAdvisories
Critical · 10.0 CVE-2025-47642 EUVD-2025-28109GHSA-cf8h-x8xq-r3cr

WordPress Ajar in5 Embed plugin <= 3.1.5 - Arbitrary File Upload Vulnerability

Published May 23, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Ajar Productions Ajar in5 Embed ajar-productions-in5-embed allows Upload a Web Shell to a Web Server.This issue affects Ajar in5 Embed: from n/a through <= 3.1.5.

Affected products

VendorProductAffectedFixed
Ajar Productions Ajar in5 Embed ≤ 3.1.5 —

References