Medium severity4.9NVD Advisory· Published Dec 2, 2025· Updated Apr 15, 2026

CVE-2025-12630

Description

The Upload.am WordPress plugin before 1.0.1 is vulnerable to arbitrary option disclosure due to a missing capability check on its AJAX request handler, allowing users such as contributor to view site options.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Upload.am/Upload.amllm-create
Range: <1.0.1
WordPress/Upload.amwp-canonicalize

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/531537f1-5547-4b0f-9e11-3f8a0b2589f5/nvd

News mentions

No linked articles in our index yet.

cvss	0.319
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000