CNNVD-202601-967 Information

Jan 06, 2026 cve

CNNVD ID

CNNVD-202601-967

CVE-2025-30996

CNNVD Published: 2026-01-06

Description (Chinese)

WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台具有在基于PHP和MySQL的服务器上架设个人博客网站的功能。WordPress plugin是一个应用插件。 WordPress多款产品存在代码问题漏洞，该漏洞源于对危险类型文件上传无限制，可能导致向Web服务器上传Web脚本。以下产品及版本受到影响：WordPress plugin Themify Sidepane 1.9.8及之前版本、WordPress plugin Themify Newsy 1.9.9及之前版本、WordPress plugin Themify Folo 1.9.6及之前版本、WordPress plugin Themify Edmin 2.0.0及之前版本、WordPress plugin Bloggie 2.0.8及之前版本、WordPress plugin Photobox 2.0.1及之前版本、WordPress plugin Wigi 2.0.1及之前版本、WordPress plugin Rezo 1.9.7及之前版本和WordPress plugin Slide 1.7.5及之前版本。

Description (English)

WordPress and WordPressplugin are products of WordPress. WordPress is a blog platform developed in the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL-based servers. WordPress plugin is an application plugin. WordPress multi-products have a code breach, which stems from the unrestricted uploading of hazardous type files, which may lead to the uploading of Web scripts to the Web server. The following products and versions have been affected: WordPress plugin Themify Sidepane 1.9.8 et seq., WordPress plugin Themify Newsy 1.9.9 et seq., WordPress plugin Themify Folo 1.9.6 et seq., WordPress plugin Themify Edmin 2.0 et seq., WordPress plugin Bloggie 2.0.8 et seq., WordPress plugin Photobox 0.1 et seq., WordPress plugin Wigi 2.1 et seq., WordPress plugin Rezo 1.9.7 et seq., and WordPress plugin Slade 1.7.5 et seq.

Hazard Level

Low

Vulnerability Type

代码问题

Affected Vendor

WordPress

Published

2026-01-06

Last Modified

2026-02-24

References

Share on: