$ cve CVE-2025-23942 JSON

CVE-2025-23942

9.1

CRITICAL · CVSS 3.1 · EPSS 2.7% (pctl 86)

In your normal cycle

Critical by CVSS (9.1), but no sign of active exploitation.

Description

Unrestricted Upload of File with Dangerous Type vulnerability in ngocuct0912 WP Load Gallery wp-load-gallery allows Upload a Web Shell to a Web Server.This issue affects WP Load Gallery: from n/a through <= 2.1.6.

Scoring

CVSS	9.1 (CRITICAL, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS	2.72% — more likely to be exploited than 86% of all CVEs
Weakness	CWE-434
On CISA KEV	no
Public exploit	none known
Published	2025-01-22
Last modified	2026-06-17

References

https://patchstack.com/database/Wordpress/Plugin/wp-load-gallery/vulnerability/wordpress-wp-load-gallery-plugin-2-1-6-arbitrary-file-upload-vulnerability?_s_id=cve

→ the Explorer · watch your stack · NVD