CVE-2025-12630 — Upload.am File Hosting VPN < 1.0.1 - Contributor+ Arbitrary Option Disclosure
The Upload.am WordPress plugin before 1.0.1 is vulnerable to arbitrary option disclosure due to a missing capability check on its AJAX request handler, allowing users such as c…
Published: 2025-12-02 · CVSS: 4.9 · CVSS 3.1
The Upload.am WordPress plugin before 1.0.1 is vulnerable to arbitrary option disclosure due to a missing capability check on its AJAX request handler, allowing users such as contributor to view site options.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7