Description
（CVE-2025-4389）Crawlomatic插件任意文件上传漏洞
（CVE-2025-4389）Crawlomatic插件任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-4389
https://github.com/advisories/GHSA-q86g-hcf4-hx9x
https://www.sentinelone.com/vulnerability-database/cve-2025-4389/
https://access.redhat.com/security/cve/cve-2025-4389
https://patchstack.com/database/wordpress/plugin/crawlomatic-multipage-scraper-post-generator/vulnerability/wordpress-crawlomatic-multipage-scraper-post-generator-plugin-2-6-8-1-unauthenticated-arbitrary-file-upload-vulnerability
https://www.scworld.com/news/crawlomatic-wordpress-plugin-patched-for-critical-98-rce-flaw
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/crawlomatic-multipage-scraper-post-generator
https://avd.aliyun.com/detail?id=AVD-2025-4389
https://cve.imfht.com/detail/CVE-2025-4389
https://thecyberexpress.com/crawlomatic-plugin-hit-by-cve-2025-4389/