Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:axle_demo_importer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductAxle Demo Importer (a32f9c66-c52c-56cb-b4fb-8387ffae4234)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-4954 vulnerable 2026-06-08 07:29:17.588267 Axle Demo Importer <= 1.0.3 - Author+ Arbitrary File Upload
The Axle Demo Importer WordPress plugin through 1.0.3 does not validate files to be uploaded, which could allow authenticated users (author and above) to upload arbitrary files such as PHP on the server
Published: 2025-06-10T06:00:11.865Z
Updated: 2025-06-11T13:30:26.508Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.