TI-2025-11151 CVE-2025-12161 · GHSA-wq7f-wxg4-cf5j
Smart Auto Upload Images <= 1.2.0 - Authenticated (Contributor+) Arbitrary File Upload
Priority MEDIUM 41
The Smart Auto Upload Images plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the auto-image creation functionality in all versions up to, and including, 1.2.0.