CVE-2025-47550

Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Instantio instantio allows Upload a Web Shell to a Web Server.This issue affects Instantio: from n/a through <= 3.3.16.

Score

CVSS 3.1 7.2 High

Status

Modified - audit@patchstack.com

Published

2025-05-07

Last modified

2026-04-28

Weaknesses

CWE-434

Affected products

• Instantio (Themefic)

References

• https://patchstack.com/database/Wordpress/Plugin/instantio/vulnerability/wordpress-instantio-3-3-16-arbitrary-file-uplo…