High severity7.3NVD Advisory· Published Dec 12, 2025· Updated Apr 15, 2026

CVE-2025-12835

Description

The WooMulti WordPress plugin through 17 does not validate a file parameter when deleting files, which could allow any authenticated users, such as subscriber to delete arbitrary files on the server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Woomultiinferred
Range: <=17
Package: https://wordpress.org/plugins/woomulti
WooMulti/WooMulti WordPress pluginllm-create
Range: <=17

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/1650ddac-04c7-47fa-b03e-bd0338243fcc/nvd

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000