Unrestricted File Upload Vulnerability in Epiphyt Form Block by WordPress

CVE-2025-54693

What is CVE-2025-54693?

The Epiphyt Form Block plugin for WordPress has a vulnerability that allows for the unrestricted upload of files with dangerous types, enabling attackers to upload web shells to the web server. This flaw poses a significant risk to the security of web applications utilizing this plugin, potentially leading to unauthorized access and severe exploitation. The issue affects versions from n/a up to 1.5.5, and users are advised to implement appropriate security measures and update their plugins to mitigate risks.

References