References https://www.rapid7.com/db/vulnerabilities/rss-feed-post-generator-echo-plugin-cve-2025-4391/ https://nvd.nist.gov/vuln/detail/CVE-2025-4391 https://github.com/advisories/GHSA-8hqp-jvp3-493j https://cve.imfht.com/detail/CVE-2025-4391 https://avd.aliyun.com/detail?id=AVD-2025-4391 https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/rss-feed-post-generator-echo https://www.sentinelone.com/vulnerability-database/cve-2025-4391/ https://feedly.com/cve/CVE-2025-4391 https://www.ameeba.com/blog/cve-2025-4391-wordpress-echo-rss-feed-post-generator-plugin-arbitrary-file-upload-vulnerability/ https://access.redhat.com/security/cve/cve-2025-4391
Related VulnerabilitiesPoCCVE-2021-25052: WordPress Button Generator <2.3.3 - Remote File InclusionPoCCVE-2022-0346: WordPress XML Sitemap Generator for Google <2.0.4 - Cross-Site Scripting/Remote Code ExecutionPoCCVE-2022-4321: PDF Generator for WordPress < 1.1.2 - Cross Site ScriptingPoCCVE-2023-1780: Companion Sitemap Generator < 4.5.3 - Cross-Site ScriptingPoCCVE-2023-37988: Contact Form Generator <= 2.5.5 - Cross-Site ScriptingPoCCVE-2024-35219: OpenAPI Generator <= 7.5.0 - Arbitrary File Read/DeletePoCCVE-2024-9935: PDF Generator Addon for Elementor Page Builder <= 1.7.5 - Arbitrary File DownloadPoCCVE-2023-47873: WordPress WP Child Theme Generator < 1.1.3 - Arbitrary File UploadPoCavnil-pdf-generator-check: useanvil.com Login CheckPoCsquid-analysis-report-generator: Squid Analysis Report GeneratorPoCpodcast-generator-ssrf: PodcastGenerator 3.2.9 - Blind SSRF via XML InjectionPoCaspose-file-download: Wordpress Aspose Cloud eBook Generator - Local File InclusionProjectworlds Online Time Table Generator 注入漏洞