Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2025-31577
CVE-2025-31577:
WordPress vulnerability analysis and mitigation
Overview
Unrestricted Upload of File with Dangerous Type vulnerability affects Appointify WordPress plugin through version 1.0.8. The vulnerability allows an attacker to upload a Web Shell to a Web Server (NVD).
Technical details
The vulnerability is classified as CWE-434 (Unrestricted Upload of File with Dangerous Type) with a CVSS v3.1 base score of 6.6 MEDIUM (Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L). The vulnerability requires administrator privileges to exploit (Patchstack).
Impact
If exploited, this vulnerability could allow a malicious actor to upload any type of file to the website, including backdoors which can then be executed to gain further access to the website (Patchstack).
Mitigation and workarounds
No official fix is available as the software appears to be abandoned. It is recommended to remove and replace the software with an alternative solution. Note that deactivating the software does not remove the security threat unless a virtual patch is deployed (Patchstack).
Additional resources
Source: This report was generated using AI
Related WordPress vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management