CVE-2025-12682

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-12682", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-11-04T01:17:43.898Z", "datePublished": "2025-11-04T13:47:35.380Z", "dateUpdated": "2026-04-08T16:58:46.542Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:58:46.542Z"}, "affected": [{"vendor": "fahadmahmood", "product": "Easy Upload Files During Checkout", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "2.9.8", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Easy Upload Files During Checkout plugin for WordPress is vulnerable to arbitrary JavaScript file uploads due to missing file type validation in the 'file_during_checkout' function in all versions up to, and including, 2.9.8. This makes it possible for unauthenticated attackers to upload arbitrary JavaScript files on the affected site's server which may make remote code execution possible."}], "title": "Easy Upload Files During Checkout <= 2.9.8 - Unauthenticated Arbitrary JavaScript File Upload", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/6a050764-0ba6-49a4-bd71-f79e3129fc4c?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset/3384711/"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-434 Unrestricted Upload of File with Dangerous Type", "cweId": "CWE-434", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL"}}], "credits": [{"lang": "en", "type": "finder", "value": "Ahmad Salem"}], "timeline": [{"time": "2025-11-03T00:00:00.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-11-04T14:16:29.973212Z", "id": "CVE-2025-12682", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-04T14:16:38.630Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-12682", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-11-04T14:16:29.973212Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-04T14:16:34.531Z"}}], "cna": {"title": "Easy Upload Files During Checkout <= 2.9.8 - Unauthenticated Arbitrary JavaScript File Upload", "credits": [{"lang": "en", "type": "finder", "value": "Ahmad Salem"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "fahadmahmood", "product": "Easy Upload Files During Checkout", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "2.9.8"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-11-03T00:00:00.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/6a050764-0ba6-49a4-bd71-f79e3129fc4c?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset/3384711/"}], "descriptions": [{"lang": "en", "value": "The Easy Upload Files During Checkout plugin for WordPress is vulnerable to arbitrary JavaScript file uploads due to missing file type validation in the 'file_during_checkout' function in all versions up to, and including, 2.9.8. This makes it possible for unauthenticated attackers to upload arbitrary JavaScript files on the affected site's server which may make remote code execution possible."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-434", "description": "CWE-434 Unrestricted Upload of File with Dangerous Type"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:58:46.542Z"}}}, "cveMetadata": {"cveId": "CVE-2025-12682", "state": "PUBLISHED", "dateUpdated": "2026-04-08T16:58:46.542Z", "dateReserved": "2025-11-04T01:17:43.898Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-11-04T13:47:35.380Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Easy Upload Files During Checkout", "vendor": "fahadmahmood", "versions": [{"lessThanOrEqual": "2.9.8", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Easy Upload Files During Checkout plugin for WordPress is vulnerable to arbitrary JavaScript file uploads due to missing file type validation in the 'file_during_checkout' function in all versions up to, and including, 2.9.8. This makes it possible for unauthenticated attackers to upload arbitrary JavaScript files on the affected site's server which may make remote code execution possible."}, {"lang": "es", "value": "El plugin Easy Upload Files During Checkout para WordPress es vulnerable a la carga de archivos JavaScript arbitrarios debido a la falta de validaci\u00f3n del tipo de archivo en la funci\u00f3n 'file_during_checkout' en todas las versiones hasta la 2.9.8, inclusive. Esto permite a atacantes no autenticados cargar archivos JavaScript arbitrarios en el servidor del sitio afectado, lo que podr\u00eda posibilitar la ejecuci\u00f3n remota de c\u00f3digo."}], "id": "CVE-2025-12682", "lastModified": "2026-10-18T21:10:00.120", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-12682", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-11-04T14:16:29.973212Z", "version": "2.0.3"}}]}, "published": "2025-11-04T14:15:33.377", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset/3384711/"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/6a050764-0ba6-49a4-bd71-f79e3129fc4c?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-434"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-22T03:56:54.059844+00:00", "value": {"mitigation_remediation": ["Upgrade the Easy Upload Files During Checkout plugin to the latest release, which includes proper MIME type validation.", "If the plugin is not essential, deactivate it entirely to eliminate the upload vector.", "Configure WordPress or the web server to enforce a whitelist of allowed MIME types (for example, image/jpeg, image/png, application/pdf) and reject all others."], "summary": {"action": "Apply Patch", "impact": "Remote Code Execution"}, "threat_synthesis": {"affected_systems": "WordPress sites that have the Easy Upload Files During Checkout plugin by fahadmahmood installed, in any version up to and including 2.9.8, are affected. The vulnerability applies to every instance of the plugin regardless of theme or other plugin configuration.", "description_and_impact": "The Easy Upload Files During Checkout plugin fails to verify the MIME type of files uploaded in the checkout process. This omission allows an unauthenticated user to submit any JavaScript file, which the server accepts and stores. Once in place, that file can be served and executed by the application, giving the attacker control of the site\u2019s execution context. The flaw is identified as CWE\u2011434, file upload through insecure type validation.", "risk_and_exploitability": "The CVSS score of 9.8 indicates a critical severity. The EPSS score of less than 1% suggests that current exploitation activity is low, and the flaw is not yet listed in CISA\u2019s KEV catalog, indicating no widely reported attacks. However, because the upload endpoint is publicly reachable and does not enforce authentication, any visitor can trigger the upload path, making the vulnerability readily exploitable in the absence of other mitigations."}}}}, "created": "2025-11-05T10:47:29.488379+00:00", "updated": "2026-04-22T04:00:08.022826+00:00", "vendors": ["wordpress", "wordpress$PRODUCT$wordpress"]}