CVE-2025-22504

Severity

CRITICAL

CVSS

10.0

EPSS

0.00485

Risk score

40.17

CISA KEV

PoC

Published

2025-01-09

Modified

2026-05-11

First seen

2026-08-07

Aliases

EUVD-2025-2785, GHSA-XMMP-PP2J-R7JM

Products

jumpdemand:4ECPS Web Forms 0 ≤0.2.18

Sources

euvd EUVD-2025-2785

Description

Unrestricted Upload of File with Dangerous Type vulnerability in jumpdemand 4ECPS Web Forms 4ecps-webforms allows Upload a Web Shell to a Web Server.This issue affects 4ECPS Web Forms: from n/a through <= 0.2.18.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-2785
https://patchstack.com/database/Wordpress/Plugin/4ecps-webforms/vulnerability/wordpress-4ecps-web-forms-plugin-0-2-18-arbitrary-file-upload-vulnerability?_s_id=cve