What the vulnerability does
01Description
The RESTful Content Syndication plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ingest_image() function in versions 1.1.0 to 1.5.0. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. This requires the attacker have access to a defined third-party server as specified in the settings, so it is unlikely that this will be exploitable by contributor-level users, and more likely to be exploited by administrators who also have access to the plugin's settings.
Explanation of Vulnerability in Simple Terms
02Summary
RESTful Content Syndication versions 1.1.0 through 1.5.0 allow authenticated users to upload files without proper validation. An attacker with low-level site access can upload malicious files, potentially gaining control of the site. Update to a version newer than 1.5.0 to resolve this issue.
What an attacker can do
03Attacker Capabilities
Upload malicious files to the server and execute code on the site.
Potential impact on your site
04Site Impact
Compromised site with potential data theft, malware injection, or complete takeover.
Conditions required to exploit
05Prerequisites
Attacker must have a low-privilege user account on the site.
Key dates
06Disclosure timeline
November 1, 2025
CVE published
November 3, 2025
Record updated
