PT-2025-25688 · Unknown · Nasatheme Flozen

Phat Rio - Bluerock · Published 2025-06-17 · Updated 2025-06-17 · CVE-2025-49071

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NasaTheme Flozen (affected versions not specified)

Description The issue allows for the unrestricted upload of files with dangerous types, enabling an attacker to upload a web shell to a web server. This can lead to further exploitation and potential control of the server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2025-49071

Affected Products

Nasatheme Flozen

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-49071 · Security Note
• https://patchstack.com/database/Wordpress/Theme/flozen-theme/vulnerability/wordpress-flozen-1-5-1-arbitrary-file-upload-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1934999195015839752 · Twitter Post
• https://patchstack.com/database/wordpress/theme/flozen-theme/vulnerability/wordpress-flozen-1-5-1-arbitrary-file-upload-vulnerability?_s_id=cve · Note