Unrestricted Upload of File with Dangerous Type vulnerability in Helmut Wandl Advanced Settings advanced-settings allows Upload a Web Shell to a Web Server.This issue affects Advanced Settings: from n/a through <= 3.1.1.
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Thu, 06 Nov 2025 20:30:00 +0000

Type Values Removed Values Added
First Time appeared Wordpress
Wordpress wordpress
Vendors & Products Wordpress
Wordpress wordpress

Thu, 06 Nov 2025 16:00:00 +0000

Type Values Removed Values Added
Description Unrestricted Upload of File with Dangerous Type vulnerability in Helmut Wandl Advanced Settings advanced-settings allows Upload a Web Shell to a Web Server.This issue affects Advanced Settings: from n/a through <= 3.1.1.
Title WordPress Advanced Settings Plugin <= 3.1.1 - Arbitrary File Upload Vulnerability
Weaknesses CWE-434
References

cve-icon MITRE

Status: PUBLISHED

Assigner: Patchstack

Published:

Updated: 2025-11-06T15:54:36.343Z

Reserved: 2025-09-06T04:45:29.150Z

Link: CVE-2025-58996

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-11-06T16:16:01.140

Modified: 2025-11-06T19:45:09.883

Link: CVE-2025-58996

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2025-11-06T20:19:03Z