CVE-2025-31002CWE-434

WordPress Squeeze plugin <= 1.6 - Arbitrary File Upload vulnerability

Critical · published April 9, 2025

CVSS v3.1
9.1
EPSS
1%
Percentile
51.4
In the wild
Unconfirmed
What it is

🚨 An unrestricted file upload vulnerability in Squeeze means attackers can easily slip in malicious files! 🔥 Think of it as a restaurant that lets anyone drop off ingredients without checking what they are—one bad potato can spoil the whole dish! 🍽️ This flaw can lead to devastating consequences. An attacker could upload harmful scripts or executables and take control of the server, wreaking havoc on your systems! You're looking at everything from data theft to total system compromise if this isn't fixed ASAP.

Put simply

Think of it as a restaurant that lets anyone drop off ingredients without checking what they are—one bad potato can spoil the whole dish! 🍽️ The vulnerability in Squeeze versions up to 1.6 allows attackers to upload files without proper validation, making it easy for them to introduce dangerous file types into the system.

What to do

This flaw can lead to devastating consequences. An attacker could upload harmful scripts or executables and take control of the server, wreaking havoc on your systems! You're looking at everything from data theft to total system compromise if this isn't fixed ASAP. To protect your systems, immediately update to the latest version of Squeeze. Also, implement strict checks on file types and sizes during uploads to ensure only safe files are processed. Monitor your servers for any signs of malicious activity. You've got this! Fixing this vulnerability will help keep your systems safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00669 · 51.4th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2025-04-09T16:10Z
EPSS history
Timeline
  • 09 APR 16:10Z
    WordPress Squeeze plugin <= 1.6 - Arbitrary File Upload vulnerability
    cvelistv5