storychief

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

storychief records in CISA KEV

No storychief vulnerabilities are listed in CISA KEV.

1 record

TI-2025-06781 CVE-2025-7441 · GHSA-fvp4-h7hv-jq2c

HIGH 80

The StoryChief plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 1.0.42.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.50881 Published 2025-08-16 No fix listed CWE-434