CVE advisoryCRITICAL
CVE-2025-12673
Flex QR Code Generator WordPress Plugin Arbitrary File Upload
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
The Flex QR Code Generator plugin for WordPress has a vulnerability that permits unauthenticated attackers to upload arbitrary files to a website's server. This could lead to the execution of malicious code, potentially compromising the affected site. The primary concern is confirming if this plugin is in use and asses