CVE-2025-14045 Details
Description
The URL Media Uploader plugin for WordPress is vulnerable to unauthorized safe file uploads due to a missing capability check on the url_media_uploader_url_upload_ajax_handler() function in all versions up to, and including, 1.0.1. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload safe media files.
A vulnerability exists in the URL Media Uploader plugin for WordPress, specifically in versions through 1.0.1. The issue arises from a missing capability check in the 'url_media_uploader_url_upload_ajax_handler()' function, which allows authenticated users with Contributor-level access and above to upload safe media files to the WordPress media library. This bypasses the default WordPress permission model, where only users with the 'upload_files' capability, such as Authors, Editors, and Administrators, are allowed to upload media.
Users are advised to add a capability check in the AJAX handler to ensure that only users with the 'upload_files' capability can upload files. No known patch is available, so it may be best to uninstall the affected plugin and find a replacement.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Dec 12, 2025CISA-ADP
Assessed Dec 15, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://gist.github.com/jasoncarle/925401bb11833b1ced2342390e20718e | CISA-ADP | ExploitTechnical Description |
| https://gist.github.com/jasoncarle/925401bb11833b1ced2342390e20718e | [email protected] | ExploitTechnical Description |
| https://plugins.trac.wordpress.org/browser/url-media-uploader/tags/1.0.1/url-media-uploader.php#L52 | [email protected] | Source CodeVendor |
| https://plugins.trac.wordpress.org/browser/url-media-uploader/trunk/url-media-uploader.php#L52 | [email protected] | Source CodeVendor |
| https://www.wordfence.com/threat-intel/vulnerabilities/id/57f09da9-0d2c-45db-b3ed-19a7c9f5a001?source=cve | [email protected] | AdvisoryRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-862 | Missing Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| URL Media Uploader | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Dec 15, 2025 | CVE Modified | CISA-ADP |
| Dec 12, 2025 | New CVE Received | [email protected] |