cleantalk
Vulnerabilities and Security Researches

WP Remote Thumbnail, CVE-2025-32140

CVE, Research URL

CVE-2025-32140

Home page URL

Security reports for WP Remote Thumbnail

Application

WP Remote Thumbnail

Published on
Apr 10, 2025
Research Description
Unrestricted Upload of File with Dangerous Type vulnerability in Nirmal Kumar Ram WP Remote Thumbnail allows Upload a Web Shell to a Web Server. This issue affects WP Remote Thumbnail: from n/a through 1.3.1.
Affected versions
Min -, max 1.3.1.
Status
vulnerable
Previous vulnerability researches
Translate Multilingual sites – TranslatePress (CVE-2024-34827) , Jun 07, 2024
Translate Multilingual sites – TranslatePress (CVE-2021-24610) , Jun 07, 2024
Translate Multilingual sites – TranslatePress (CVE-2022-3141) , Jun 07, 2024
Translate Multilingual sites – TranslatePress (CVE-2025-30773) , Mar 28, 2025
New vulnerability
WP Remote Thumbnail (CVE-2025-32140) , Apr 12, 2025
WP ULike – Most Advanced WordPress Marketing Toolkit (CVE-2025-32259) , Apr 12, 2025
WP Table Builder – WordPress Table Plugin (CVE-2025-32598) , Apr 12, 2025
Site Notify (CVE-2025-32240) , Apr 12, 2025
Vice Versa (CVE-2025-27350) , Apr 12, 2025