CVE-2025-12968

The Infility Global plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and capability checks in all versions up to, and including, 2.14.42. This is due to the `upload_file` function in the `infility_import_file` class only validating the MIME type which can be easily spoofed, and the `import_data` function missing capability checks. This makes it possible for authenticated attackers, with subscriber level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.

• CWE-434

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3421596%40infility-global&new=3421596%40infility-global&sfp_email=&sfph_mail=
• https://wordpress.org/plugins/infility-global/
• https://www.wordfence.com/threat-intel/vulnerabilities/id/542a18f6-9d17-4e54-85e1-e01630ca371e?source=cve

Published

Dec 12, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-12962The Local Syndication plugin for WordPress is vulnerable to …6.4
• CVE-2025-12963The LazyTasks – Project & Task Management with Collaboration…9.8
• CVE-2025-12964The Magical Products Display plugin for WordPress is vulnera…6.4
• CVE-2025-12965The Magical Posts Display plugin for WordPress is vulnerable…6.4
• CVE-2025-12966The All-in-One Video Gallery plugin for WordPress is vulnera…8.8
• CVE-2025-12967An issue in AWS Wrappers for Amazon Aurora PostgreSQL may al…8.6
• CVE-2025-12969Fluent Bit in_forward input plugin does not properly enforce…6.5
• CVE-2025-1297Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2025-12970The extract_name function in Fluent Bit in_docker input plug…8.8
• CVE-2025-12971The Folders – Unlimited Folders to Organize Media Library Fo…4.3
• CVE-2025-12972Fluent Bit out_file plugin does not properly sanitize tag va…5.3
• CVE-2025-12973The S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & I…7.2