CVE-2025-4954 – Axle Demo Importer WordPress File Upload Vulnerability

CVE ID : CVE-2025-4954

Published : June 10, 2025, 6:15 a.m. | 44 minutes ago

Description : The Axle Demo Importer WordPress plugin through 1.0.3 does not validate files to be uploaded, which could allow authenticated users (author and above) to upload arbitrary files such as PHP on the server

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…