CVE-2025-69992: Phpgurukul News Portal

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

phpgurukul News Portal Project V4.1 has File Upload Vulnerability via upload.php, which enables the upload of files of any format to the server without identity authentication.

Affected products

• Phpgurukul News Portal: version 4.1 only

Published 2026-01-13. Last modified 2026-06-17.