What is the CVSS score of CVE-2025-58963?

CVE-2025-58963 has a CVSS 3.1 base score of 10.0 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Medcity CVE-2025-58963

Q: Which versions of Medcity are affected by CVE-2025-58963?

Unrestricted file upload in the Medcity WordPress theme before version 1.1.9 allows unauthenticated attackers to upload a web shell, leading to complete compromise of the web server.

CRITICAL

Unrestricted Upload of File with Dangerous Type (CWE-434)

2025-10-22 audit@patchstack.com

WordPress File Upload Wordpress Theme

10.0

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

10.0 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

vuln.today AI

10.0 CRITICAL

Network-based upload with no authentication leads to arbitrary file write with scope change to the web server context.

3.1 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 26, 2026 - 18:37 vuln.today

CVE Published

Oct 22, 2025 - 15:15 cve.org

CRITICAL 10.0

DescriptionCVE.org

Unrestricted Upload of File with Dangerous Type vulnerability in 7oroof Medcity medcity allows Upload a Web Shell to a Web Server.This issue affects Medcity: from n/a through < 1.1.9.

AnalysisAI

Unrestricted file upload in the Medcity WordPress theme before version 1.1.9 allows unauthenticated attackers to upload a web shell, leading to complete compromise of the web server. This vulnerability, rated critical with CVSS 10.0 and CWE-434, is not currently listed in CISA KEV, and the EPSS score of 0.06% indicates low probability of widespread exploitation.

Technical ContextAI

The vulnerability resides in the file upload functionality of the Medcity theme (CWE-434: Unrestricted Upload of File with Dangerous Type). The theme fails to properly validate file types or enforce authentication for upload endpoints, allowing arbitrary file uploads (e.g., PHP scripts) to the server. The CVSS vector indicates the attack originates from the network (AV:N), requires no privileges or user interaction, and can achieve a scope change (S:C) by writing executable files outside the theme's normal context.

Affected ProductsAI

Medcity theme by 7oroof, versions below 1.1.9. Affected installations run on WordPress. Patchstack advisory: https://patchstack.com/database/Wordpress/Theme/medcity/vulnerability/wordpress-medcity-theme-1-1-9-arbitrary-file-upload-vulnerability?_s_id=cve

RemediationAI

Update the Medcity theme to version 1.1.9 or later, which contains the fix. As a temporary measure, restrict access to any file upload endpoints by IP allowlisting or authentication enforcement if possible, or disable the theme's file-upload feature entirely until the update can be applied, though these mitigations may break legitimate functionality. Refer to the Patchstack advisory for detailed patch information and vendor guidance.