Skip to content
CVE PROGRAM SOURCE RECORD6.6 Medium

CVE-2025-39538

WordPress WP-Advanced-Search plugin <= 3.3.9.4 - Arbitrary File Upload Vulnerability

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Mathieu Chartier WP-Advanced-Search wp-advanced-search allows Upload a Web Shell to a Web Server.This issue affects WP-Advanced-Search: from n/a through <= 3.3.9.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mathieu Chartier WP-Advanced-Search

Default version status: unaffected

  • 0 to ≤ 3.3.9.4affected

References