CVE-2025-39538: Mathieu Chartier Wp-Advanced-Search

Medium severity, CVSS 6.6. EPSS: 0.5% chance of exploitation in the next 30 days.

Unrestricted Upload of File with Dangerous Type vulnerability in Mathieu Chartier WP-Advanced-Search wp-advanced-search allows Upload a Web Shell to a Web Server.This issue affects WP-Advanced-Search: from n/a through <= 3.3.9.4.

Affected products

• Mathieu Chartier Wp-Advanced-Search: up to and including 3.3.9.4

Published 2025-04-16. Last modified 2026-06-17.