CVE-2025-12775

The WP Dropzone plugin for WordPress is vulnerable to authenticated arbitrary file upload in all versions up to, and including, 1.1.0 via the `ajax_upload_handle` function. This is due to the chunked upload functionality writing files directly to the uploads directory before any file type validation occurs. This makes it possible for authenticated attackers, with subscriber level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.

• CWE-434

• https://plugins.trac.wordpress.org/browser/wp-dropzone/tags/1.1.0/includes/class-plugin.php#L127
• https://plugins.trac.wordpress.org/browser/wp-dropzone/tags/1.1.0/includes/class-plugin.php#L88
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3395966%40wp-dropzone&new=3395966%40wp-dropzone&sfp_email=&sfph_mail=
• https://www.wordfence.com/threat-intel/vulnerabilities/id/afd7aeb7-2c6f-4b23-b8b1-52fb010e5aac?source=cve

Published

Nov 18, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-1277A maliciously crafted PDF file, when parsed through Autodesk…7.8
• CVE-2025-12770The New User Approve plugin for WordPress is vulnerable to u…5.3
• CVE-2025-12771IBM Concert 1.0.0 through 2.1.0 is vulnerable to a stack-bas…7.8
• CVE-2025-12772Brocade SANnav before 2.4.0b logs the Brocade Fabric OS Swit…4.9
• CVE-2025-12773A vulnerability in update-reports-purge-settings.sh script l…6.5
• CVE-2025-12774A vulnerability in the migration script for Brocade SANnav b…7.5
• CVE-2025-12776The Report Builder component of the application stores user …5.4
• CVE-2025-12777The YITH WooCommerce Wishlist plugin for WordPress is vulner…5.3
• CVE-2025-12778The Ultimate Member Widgets for Elementor – WordPress User D…5.3
• CVE-2025-12779Improper handling of the authentication token in the Amazon …8.8
• CVE-2025-1278An issue has been discovered in GitLab CE/EE affecting all v…7.5
• CVE-2025-12780Rejected reason: This CVE ID has been rejected or withdrawn …