CVE-2025-47637: WordPress STAGGS plugin <= 2.11.0 - Arbitrary File Upload Vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in STAGGS STAGGS allows Upload a Web Shell to a Web Server. This issue affects STAGGS: from n/a through 2.11.0.
Other sources
Unrestricted Upload of File with Dangerous Type vulnerability in STAGGS STAGGS staggs allows Upload a Web Shell to a Web Server.This issue affects STAGGS: from n/a through <= 2.11.0.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47637?
CVE-2025-47637 is a high severity vulnerability due to the potential for unauthorized web shell uploads.
How do I fix CVE-2025-47637?
To fix CVE-2025-47637, update the STAGGS software to version 2.11.1 or later.
What is the impact of CVE-2025-47637?
The impact of CVE-2025-47637 includes arbitrary file uploads, potentially allowing attackers to execute malicious scripts on the server.
Which software versions are affected by CVE-2025-47637?
CVE-2025-47637 affects STAGGS versions up to and including 2.11.0.
Is there a workaround for CVE-2025-47637?
Currently, the best workaround for CVE-2025-47637 is to disable file uploads until the software is updated.