CVE-2025-47577

CVSS 3.1: 10.0 critical
EPSS: 5%p91
Published: May 19, 2025 · May 19, 2025
Modified: Jun 17, 2026

Analyze CVE-2025-47577 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Unrestricted Upload of File with Dangerous Type vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Upload a Web Shell to a Web Server.This issue affects TI WooCommerce Wishlist: from n/a through <= 2.9.2.

Ecosystems: WordPress, E-commerce

Weakness: CWE-434

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.6%)

In the news

2 stories

⚡ Weekly Recap: APT Intrusions, AI Malware, Zero

The Hacker NewsJun 3, 04:04 UTC · Jun 3, 2025MalwareExploitedCVE-2025-3935 CVE-2025-47577 CVE-2025-2760+142

Over 100,000 WordPress Sites at Risk from Critical CVSS 10.0 Vulnerability in Wishlist Plugin

The Hacker NewsMay 29, 08:52 UTC · May 29, 2025VulnerabilityCVE-2025-475772