CVE-2025-12682

Vulnerability Description

The Easy Upload Files During Checkout plugin for WordPress is vulnerable to arbitrary JavaScript file uploads due to missing file type validation in the 'file_during_checkout' function in all versions up to, and including, 2.9.8. This makes it possible for unauthenticated attackers to upload arbitrary JavaScript files on the affected site's server which may make remote code execution possible.

Vulnerability Details

Published Date

November 04, 2025

Last Modified

November 04, 2025

Source

NVD

CVE-2025-12682

Vulnerability Description

Vulnerability Details

Discussion (0)

Add Comment