CalvinBackup/CVEs-PoC
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2026-05-31 01:49:30 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
4e4e30233e70832d643d5c6ab6fbfa6f130b4bb1
CVEs-PoC/2025/CVE-2025-0394.md
T
0xMarcio cb00e1339f Update CVE list 2025-09-29 21:09
2025-09-29 21:09:30 +02:00

1.1 KiB
Raw Blame History

CVE-2025-0394

Description

The WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the gh_big_file_upload() function in all versions up to, and including, 3.7.3.5. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.

POC

Reference

No PoCs from references.

Github

Reference in New Issue View Git Blame Copy Permalink