CVE-2025-34085

UNKNOWN

Published 2025-07-09T00:48:47.721Z

Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2025-34085. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

No description available

Available Exploits

WordPress Simple File List <=4.2.2 - Remote Code Execution

An unrestricted file upload vulnerability in the WordPress Simple File List plugin before version 4.2.3 allows unauthenticated remote attackers to achieve remote code execution. The plugin's upload endpoint (ee-upload-engine.php) restricts file uploads based on extension, but lacks proper validation after file renaming. An attacker can first upload a PHP payload disguised as a .png file, then use the plugin’s ee-file-engine.php rename functionality to change the extension to .php. This bypasses upload restrictions and results in the uploaded payload being executable on the server.

ID: CVE-2025-34085

Author: princechaddha Critical

References:

Related News

No news articles found for this CVE.

EU Vulnerability Database

Monitored by ENISA for EU cybersecurity

EU Coordination

EU Coordinated

Exploitation Status

No Known Exploitation

EUVD ID

View on ENISA

ENISA Analysis

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it is a duplicate of CVE-2020-36847.

Affected Products (ENISA)

element engage llc

simple file list wordpress plugin

ENISA Scoring

CVSS Score (4.0)

10.0

/10

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

EPSS Score

0.610

probability

ENISA References

https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/wp_simple_file_list_rce.rb

https://plugins.trac.wordpress.org/changeset/2286920/simple-file-list

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/simple-file-list/simple-file-list-423-remote-code-execution

https://web.archive.org/web/20220426044003/https://wpscan.com/vulnerability/10192/

https://www.cybersecurity-help.cz/vdb/SB2020042711

https://packetstorm.news/files/id/160221

https://wordpress.org/plugins/simple-file-list/

https://simplefilelist.com/

https://vulncheck.com/advisories/wordpress-simple-file-list-plugin-rce

Data provided by ENISA EU Vulnerability Database. Last updated: July 16, 2025

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed CRITICAL

GHSA-8xp7-p66p-4h9h

Advisory Details

An unrestricted file upload vulnerability in the WordPress Simple File List plugin prior to version 4.2.3 allows unauthenticated remote attackers to achieve remote code execution. The plugin's upload endpoint (ee-upload-engine.php) restricts file uploads based on extension, but lacks proper validation after file renaming. An attacker can first upload a PHP payload disguised as a .png file, then use the plugin’s ee-file-engine.php rename functionality to change the extension to .php. This bypasses upload restrictions and results in the uploaded payload being executable on the server.

CVSS Scoring

CVSS Score

9.0

CVSS Vector


                                    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2025-34085

WEB https://packetstorm.news/files/id/160221

WEB https://plugins.trac.wordpress.org/changeset/2286920/simple-file-list

WEB https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/wp_simple_file_list_rce.rb

WEB https://simplefilelist.com

WEB https://vulncheck.com/advisories/wordpress-simple-file-list-plugin-rce

WEB https://web.archive.org/web/20220426044003/https://wpscan.com/vulnerability/10192

WEB https://wordpress.org/plugins/simple-file-list

WEB https://www.cybersecurity-help.cz/vdb/SB2020042711

WEB https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/simple-file-list/simple-file-list-423-remote-code-execution

Advisory provided by GitHub Security Advisory Database. Published: July 9, 2025, Modified: July 16, 2025

Social Media Intelligence

Real-time discussions and threat intelligence from social platforms

1 post

Reddit • 1 month, 3 weeks ago

crstux

Payload

🔥 Top 10 Trending CVEs (14/07/2025) Here’s a quick breakdown of the 10 most interesting vulnerabilities trending today: **1. [CVE-2025-25257](https://nvd.nist.gov/vuln/detail/CVE-2025-25257)** - 📝 n/a - 📈 **CVSS:** 0 - 🧭 **Vector:** n/a - ⚠️ **Priority:** n/a - 📝 **Analysis:** No Information available for this CVE at the moment --- **2. [CVE-2025-34085](https://nvd.nist.gov/vuln/detail/CVE-2025-34085)** …

Also mentions: CVE-2025-47812 CVE-2025-5777 CVE-2025-5959 CVE-2025-48827 CVE-2023-52927 CVE-2024-34470 CVE-2023-45866 CVE-2020-0556

4.0

View Original

Published: 2025-07-09T00:48:47.721Z

Last Modified: 2025-07-16T15:48:49.693Z

Copied to clipboard!