{"id":"CVE-2025-15700","published":"2026-10-09T07:17:16.640","lastModified":"2026-10-09T15:17:05.333","description":"The AWP Classifieds WordPress plugin before 4.4.9 does not validate the type of files extracted from an uploaded ZIP archive during its listing-import feature, allowing users with the AWP Classifieds WordPress plugin before 4.4.9's management capability to upload arbitrary PHP files to a publicly accessible, network-shared directory and achieve remote code execution.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-434"],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/6d3e7721-41d4-4e5f-9a44-c601f0cdfe50/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The AWP Classifieds WordPress plugin allows users with management capabilities to upload arbitrary PHP files via a ZIP archive import feature without validating file types, enabling remote code execution on the server. This vulnerability affects versions before 4.4.9 and can be exploited by authenticated users to gain full control over the affected WordPress installation.","exploitability":"Exploitation is relatively straightforward for authenticated users with AWP Classifieds management privileges, requiring only a ZIP file upload with malicious PHP code and subsequent access to the publicly accessible directory where files are extracted.","blast_radius":"The impact could be significant as attackers could execute arbitrary code on the WordPress server, potentially leading to complete compromise of the site, data exfiltration, or use as a launchpad for further attacks within the network.","remediation":"Upgrade to version 4.4.9 or later to remediate this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","wordpress","file-upload"],"model":"garnet-coder","analyzedAt":"2026-10-13T08:50:25.578Z"}}