CVE-2025-45242: Rhymix

High severity, CVSS 7.7. EPSS: 0.4% chance of exploitation in the next 30 days.

Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the procFileAdminEditImage method in /file/file.admin.controller.php.

Affected products

• Rhymix Rhymix: version 2.1.22 only

Published 2025-05-05. Last modified 2026-07-05.