CVE-2025-62047: WordPress Case Addons plugin < 1.3.0 - Arbitrary File Upload vulnerability
Published Nov 6, 2025
·Updated
Unrestricted Upload of File with Dangerous Type vulnerability in Case-Themes Case Addons case-addons.This issue affects Case Addons: from n/a through < 1.3.0.
Affected Software
1 affected component
WordPress Case Addons<1.3.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
wordpress/case-addonsto a version that resolves this vulnerability.Fixed in 1.3.0
Event History
Nov 6, 2025
CVE Published
via MITRE·03:55 PM
Data Sourced
via MITRE·03:55 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-62047?
CVE-2025-62047 is rated as a high severity vulnerability due to the potential for arbitrary file upload.
2
How do I fix CVE-2025-62047?
To fix CVE-2025-62047, upgrade Case Addons to version 1.3.0 or later.
3
What type of attack does CVE-2025-62047 enable?
CVE-2025-62047 enables attackers to upload files of dangerous types, which can lead to remote code execution.
4
Which versions of Case Addons are affected by CVE-2025-62047?
CVE-2025-62047 affects all versions of Case Addons before 1.3.0.
5
Is there a patch available for CVE-2025-62047?
Yes, a patch is available by updating to Case Addons version 1.3.0 or later.