CVE-2025-15067: Innorix Wp

High severity, CVSS 7.7. EPSS: 0.1% chance of exploitation in the next 30 days.

Unrestricted Upload of File with Dangerous Type vulnerability in Innorix Innorix WP allows Upload a Web Shell to a Web Server.This issue affects Innorix WP from All versions If the "exam" directory exists under the directory where the product is installed (ex: innorix/exam)

Affected products

• Innorix Innorix Wp

Published 2025-12-29. Last modified 2026-10-07.