$ cve CVE-2025-47577 JSON

CVE-2025-47577

10.0

CRITICAL · CVSS 3.1 · EPSS 4.6% (pctl 91)

In your normal cycle

Critical by CVSS (10), but no sign of active exploitation.

Description

Unrestricted Upload of File with Dangerous Type vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Upload a Web Shell to a Web Server.This issue affects TI WooCommerce Wishlist: from n/a through <= 2.9.2.

Scoring

CVSS	10.0 (CRITICAL, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS	4.64% — more likely to be exploited than 91% of all CVEs
Weakness	CWE-434
On CISA KEV	no
Public exploit	none known
Published	2025-05-19
Last modified	2026-06-17

References

https://patchstack.com/database/Wordpress/Plugin/ti-woocommerce-wishlist/vulnerability/wordpress-ti-woocommerce-wishlist-2-9-2-arbitrary-file-upload-vulnerability?_s_id=cve

→ the Explorer · watch your stack · NVD