CVE-2025-15067 — Unrestricted File Upload and RCE in Innorix WP

CVE-2025-15067

Unrestricted File Upload and RCE in Innorix WP PUBLISHED

Description (CNA)

Unrestricted Upload of File with Dangerous Type vulnerability in Innorix Innorix WP allows Upload a Web Shell to a Web Server.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory where the product is installed (ex: innorix/exam)

Affected (CNA)

Vendor / product	Versions
Innorix / Innorix WP	unknown 0 before *

CWE

CWE-434

References

https://www.innorix.com/
https://www.gnit.co.kr/software/innorix_product.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.