CVE-2025-12966
BaseFortify
Publication date: 2025-12-06
Last updated on: 2025-12-08
Assigner: Wordfence
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| wordpress | all-in-one_video_gallery | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-434 | The product allows the upload or transfer of dangerous file types that are automatically processed within its environment. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the All-in-One Video Gallery plugin for WordPress versions 4.5.4 to 4.5.7. It is caused by missing file type validation in the resolve_import_directory() function, which allows authenticated users with Author-level access or higher to upload arbitrary files to the server. This can potentially lead to remote code execution on the affected site.
How can this vulnerability impact me? :
An attacker with Author-level access or higher can exploit this vulnerability to upload arbitrary files, which may lead to remote code execution on your server. This can compromise the security and integrity of your website, potentially allowing attackers to take control, steal data, or disrupt services.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update the All-in-One Video Gallery plugin to a version later than 4.5.7 where security enhancements have been applied. These include nonce verification to prevent CSRF attacks, user capability checks to restrict import/export actions to authorized users, and MIME type validation to prevent unsafe file uploads. Additionally, ensure that the plugin's import/export functionality is using the latest secure code as shown in changeset 3405593, which includes protections such as creating .htaccess and web.config files to deny web access to extracted files and deleting unsafe files after extraction. [2]