CVE-2025-47550: Arbitrary File Upload in Instantio WordPress Plugin via ins_options_save

github.com 2025-05-11中国語 →English →

Security AdvisoryCVE-2025-47550CriticalInstantio

Affected:

Instantio Wordpress Plugin <= 3.3.16

参照 CVE: CVE-2025-47550 · 6.6

文章内图片已隐藏以节省流量 · 升级 Pro 后可见图片及离线存档

本文由本平台从 github.com 自动抓取，经 LLM 流水线清洗、双语翻译。版权归原作者。查看原文。

このソースからの他の記事

Authenticated Mass Information Disclosure on /api/users in Sails.js (CVE-2025-53959) 2026-08-19 Patch for SSO Mass Assignment Account Takeover and Authenticated PII Leakage 2026-08-19 Pre-Auth Mass Assignment SSO Account Takeover Vulnerability Analysis 2026-08-19 4gaBoards Mass Assignment Vulnerability Leads to SSO Account Pre-Hijacking 2026-08-19 SQLite DB Storage Path Symlink Vulnerability and Secure Fix Guidance 2026-08-19

离线存档

离线截图 & PDF 为 Pro 专属