CVE-2025-54693: Epiphyt Form Block

Critical severity, CVSS 9.0. EPSS: 0.3% chance of exploitation in the next 30 days.

Unrestricted Upload of File with Dangerous Type vulnerability in epiphyt Form Block form-block allows Upload a Web Shell to a Web Server.This issue affects Form Block: from n/a through <= 1.5.5.

Affected products

• Epiphyt Form Block: up to and including 1.5.5

Published 2025-08-14. Last modified 2026-06-17.