CVE-2025-47577

—

CVSS 3.1

10.0 critical

EPSS

5%p91

Published

May 19, 2025 (May 19, 2025)

Modified

Jun 17, 2026

Description

Unrestricted Upload of File with Dangerous Type vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Upload a Web Shell to a Web Server.This issue affects TI WooCommerce Wishlist: from n/a through <= 2.9.2.

Ecosystems: WordPress, E-commerce
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.6%)

In the news2 stories

⚡ Weekly Recap: APT Intrusions, AI Malware, Zero

The Hacker NewsJun 3, 04:04 UTC · Jun 3, 2025Malware in the wildCVE-2025-3935 CVE-2025-47577 CVE-2025-2760+14 CVEs

Over 100,000 WordPress Sites at Risk from Critical CVSS 10.0 Vulnerability in Wishlist Plugin

The Hacker NewsMay 29, 08:52 UTC · May 29, 2025Vulnerability CVE-2025-47577