Description
The StoryChief plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 1.0.42. This vulnerability occurs through the /wp-json/storychief/webhook REST-API endpoint that does not have sufficient filetype validation. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| storychief | StoryChief | ≤ 1.0.42 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
WordPress StoryChief Plugin Unauthenticated RCE
exploit/multi/http/wp_plugin_story_chef_file_upload
Exploit-DB 1
- StoryChief Wordpress Plugin 1.0.42 - Arbitrary File Upload EDB-52422 · webapps · Aug 26, 2025
GitHub 2 repositories
-
AnotherSec/CVE-2025-7441 ★ 3 · Oct 14, 2025
StoryChief <= 1.0.42 - Unauthenticated Arbitrary File Upload
-
Nxploited/CVE-2025-7441 ★ 1 · Oct 7, 2025
StoryChief <= 1.0.42 - Unauthenticated Arbitrary File Upload
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.