VulnerabilityDeferred

CVE-2025-7441

The StoryChief plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 1.0.42.

CRITICAL 9.8EPSS 39.5%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 39.5%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.

Description

The StoryChief plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 1.0.42. This vulnerability occurs through the /wp-json/storychief/webhook REST-API endpoint that does not have sufficient filetype validation. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

CVSS 3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 39.49% probability · 99th percentile
CISA KEV: Not listed
Weakness: CWE-434
Source: security@wordfence.com

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.