Vulnerability Database

309,364

Total vulnerabilities in the database

CVE-2025-4954

The Axle Demo Importer WordPress plugin through 1.0.3 does not validate files to be uploaded, which could allow authenticated users (author and above) to upload arbitrary files such as PHP on the server

  • Published: Jun 10, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-4954
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.8
  • AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
axlethemes / axle_demo_importer - 1.0.3.x