CVE-2025-12563
BaseFortify
Publication date: 2025-11-06
Last updated on: 2025-11-06
Assigner: Wordfence
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| blog2social | blog2social | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-862 | The product does not perform an authorization check when an actor attempts to access a resource or perform an action. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the Blog2Social WordPress plugin, where an incorrect capability check in the uploadVideo() function allows authenticated users with Subscriber-level access or higher to upload mp4 files to the website's uploads directory. This means users with relatively low privileges can upload files that might not be intended, potentially leading to misuse.
How can this vulnerability impact me? :
The vulnerability allows attackers with Subscriber-level access to upload mp4 files to the server, which could be used to upload malicious files or content. While it does not directly affect confidentiality or availability, it can lead to integrity issues by allowing unauthorized file uploads, potentially enabling further attacks or misuse of server resources.