Unrestricted File Upload Vulnerability in Crossword Compiler Puzzles by WordWebSoftware
CVE-2025-46490

9.9CRITICAL

Key Information:

Vendor

WordPress
Status
Crossword Compiler Puzzles
Vendor
CVE Published:
23 May 2025

What is CVE-2025-46490?

The unrestricted file upload vulnerability in Crossword Compiler Puzzles allows an attacker to upload potentially malicious files, such as web shells, to the server, which can lead to unauthorized access and control over the web application environment. This vulnerability impacts versions from n/a up to 5.2, posing risks for users of this software who do not implement appropriate security measures.

Affected Version(s)

Crossword Compiler Puzzles <= 5.2

References

https://patchstack.com/database/wordpress/plugin/crosswor...
vdb-entry

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

astra.r3verii (Patchstack Alliance)
.