CVE-2025-47452
BaseFortify
Publication date: 2025-06-17
Last updated on: 2026-04-23
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-434 | The product allows the upload or transfer of dangerous file types that are automatically processed within its environment. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-47452 is an Arbitrary File Upload vulnerability in the WordPress WP VR plugin versions up to and including 8.5.26. It allows a malicious user with at least Contributor privileges to upload any type of file, including dangerous files like web shells, to the affected website. This can enable attackers to execute malicious code on the server and gain unauthorized access. [1]
How can this vulnerability impact me? :
This vulnerability can have severe impacts including unauthorized access to your web server, execution of malicious code, potential data breaches, and full compromise of the affected website. Attackers can upload backdoors or web shells to control the server, leading to loss of data integrity, confidentiality, and availability. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection involves scanning the web server for unauthorized uploaded files, especially web shells or suspicious files in upload directories. Since the vulnerability allows arbitrary file uploads by users with Contributor privileges, monitoring for unusual file types or recently added files in the plugin's upload paths is recommended. Server-side malware scanning tools should be used rather than plugin-based scanners, as attackers may tamper with the latter. Specific commands are not provided in the resources. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include updating the WP VR plugin to version 8.5.27 or later, which contains the fix for this vulnerability. Until the update can be applied, users can deploy the virtual patch (vPatch) provided by Patchstack to block attacks exploiting this issue. Additionally, professional incident response and server-side malware scanning are recommended if compromise is suspected. [1]