CVE-2025-12630 — Upload.am File Hosting VPN < 1.0.1 - Contributor+ Arbitrary Option Disclosure

CVE-2025-12630

Upload.am File Hosting VPN < 1.0.1 - Contributor+ Arbitrary Option Disclosure PUBLISHED

Description (CNA)

The Upload.am WordPress plugin before 1.0.1 is vulnerable to arbitrary option disclosure due to a missing capability check on its AJAX request handler, allowing users such as contributor to view site options.

Affected (CNA)

Vendor / product	Versions
Unknown / Upload.am	affected 0 before 1.0.1

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/531537f1-5547-4b0f-9e11-3f8a0b2589f5/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.