Compress And Upload Plugin
1 CVEs
product
Monthly
The Compress & Upload WordPress plugin before 1.0.5 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they. Rated low severity (CVSS 3.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
WordPress
File Upload
Compress And Upload Plugin
PHP
NVD
WPScan
CVSS 3.1
3.8
EPSS
0.0%
CVE-2025-8889
EPSS 0%
CVSS 3.8
LOW
POC
Monitor
The Compress & Upload WordPress plugin before 1.0.5 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they. Rated low severity (CVSS 3.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
WordPress
File Upload
Compress And Upload Plugin
+1
NVD
WPScan