CVE-2025-12171 | RESTful Content Syndication Plugin up to 1.1.0/1.5.0 on WordPress Setting ingest_image unrestricted upload

October 31, 2025 Yanac

A vulnerability was found in RESTful Content Syndication Plugin up to 1.1.0/1.5.0 on WordPress. It has been classified as critical. This impacts the function ingest_image of the component Setting Handler. Performing manipulation results in unrestricted upload.

This vulnerability is reported as CVE-2025-12171. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More