CVE-2025-10147

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-10147", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-09-09T00:48:59.466Z", "datePublished": "2025-09-23T08:26:15.173Z", "dateUpdated": "2026-04-08T16:34:24.567Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:34:24.567Z"}, "affected": [{"vendor": "eteubert", "product": "Podlove Podcast Publisher", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "4.2.6", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'move_as_original_file' function in all versions up to, and including, 4.2.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible."}], "title": "Podlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Upload", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/093058f1-c717-424f-9bd5-4838df8d20a1?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/podlove-podcasting-plugin-for-wordpress/tags/4.2.6/lib/model/image.php#L465"}, {"url": "https://plugins.trac.wordpress.org/changeset/3364994/"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-434 Unrestricted Upload of File with Dangerous Type", "cweId": "CWE-434", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL"}}], "credits": [{"lang": "en", "type": "finder", "value": "Arkadiusz Hydzik"}], "timeline": [{"time": "2025-09-09T01:04:30.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2025-09-22T00:00:00.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-09-23T19:33:21.105798Z", "id": "CVE-2025-10147", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-23T19:33:28.739Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-10147", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-09-23T19:33:21.105798Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-23T19:33:24.976Z"}}], "cna": {"title": "Podlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Upload", "credits": [{"lang": "en", "type": "finder", "value": "Arkadiusz Hydzik"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "eteubert", "product": "Podlove Podcast Publisher", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "4.2.6"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-09-09T01:04:30.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2025-09-22T00:00:00.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/093058f1-c717-424f-9bd5-4838df8d20a1?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/podlove-podcasting-plugin-for-wordpress/tags/4.2.6/lib/model/image.php#L465"}, {"url": "https://plugins.trac.wordpress.org/changeset/3364994/"}], "descriptions": [{"lang": "en", "value": "The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'move_as_original_file' function in all versions up to, and including, 4.2.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-434", "description": "CWE-434 Unrestricted Upload of File with Dangerous Type"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:34:24.567Z"}}}, "cveMetadata": {"cveId": "CVE-2025-10147", "state": "PUBLISHED", "dateUpdated": "2026-04-08T16:34:24.567Z", "dateReserved": "2025-09-09T00:48:59.466Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-09-23T08:26:15.173Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Podlove Podcast Publisher", "vendor": "eteubert", "versions": [{"lessThanOrEqual": "4.2.6", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'move_as_original_file' function in all versions up to, and including, 4.2.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible."}, {"lang": "es", "value": "El plugin Podlove Podcast Publisher para WordPress es vulnerable a cargas de archivos arbitrarios debido a la falta de validaci\u00f3n del tipo de archivo en la funci\u00f3n 'move_as_original_file' en todas las versiones hasta la 4.2.6, inclusive. Esto hace posible que atacantes no autenticados carguen archivos arbitrarios en el servidor del sitio afectado, lo que puede hacer posible la ejecuci\u00f3n remota de c\u00f3digo."}], "id": "CVE-2025-10147", "lastModified": "2026-10-11T20:10:00.200", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-10147", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-09-23T19:33:21.105798Z", "version": "2.0.3"}}]}, "published": "2025-09-23T09:15:30.920", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/podlove-podcasting-plugin-for-wordpress/tags/4.2.6/lib/model/image.php#L465"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset/3364994/"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/093058f1-c717-424f-9bd5-4838df8d20a1?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-434"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-22T22:10:44.387063+00:00", "value": {"mitigation_remediation": ["Update Podlove Podcast Publisher to the latest version that removes the flaw", "If an update cannot be applied immediately, disable or uninstall the Podlove Podcast Publisher plugin", "Configure the web server or the application to reject non\u2011image/script file types for uploads and enforce MIME\u2011type checks", "Monitor the application and server logs for any unauthorized upload activity"], "summary": {"action": "Immediate Patch", "impact": "Remote Code Execution"}, "threat_synthesis": {"affected_systems": "The vulnerability affects eteubert's Podlove Podcast Publisher plugin for WordPress in all releases up to and including version 4.2.6, including the 4.2.6 release. Users running the plugin on their sites in these versions are exposed.", "description_and_impact": "The Podlove Podcast Publisher WordPress plugin contains an unauthenticated arbitrary file upload flaw due to missing file\u2011type validation in the 'move_as_original_file' function. An attacker can post any file type to the site, including executable scripts, which may lead to remote code execution or other malicious actions on the server. This weakness is classified as CWE\u2011434 (Unrestricted Upload of File with Insecure Type).", "risk_and_exploitability": "With a CVSS score of 9.8, the flaw is a critical vulnerability. The EPSS score of less than 1% indicates a very low current exploitation probability, and it is not listed in the CISA KEV catalog. However, because the upload does not require authentication, the attack vector is straightforward: an unauthenticated user can upload a malicious file directly to the server, exploiting the lack of file\u2011type checks. The consequence can be full control over the web application or the underlying server, depending on the file execution context."}}}}, "created": "2025-09-23T16:03:10.335273+00:00", "updated": "2026-04-22T22:15:26.356345+00:00", "vendors": ["podlove", "podlove$PRODUCT$podlove_podcast_publisher", "wordpress", "wordpress$PRODUCT$wordpress"]}