CrowdSecLive Exploit Tracker
Limited ExploitationCVE-2025-49071Public Exploit

Flozen - Arbitrary File Upload (CVE-2025-49071)

PublishedJun 17, 2025
First SeenN/A
Last Seen
Reported
N
NasaThemeFlozen
wordpresscms

Description

Unrestricted Upload of File with Dangerous Type vulnerability in NasaTheme Flozen flozen-theme allows Upload a Web Shell to a Web Server.This issue affects Flozen < 1.5.1.

psychologyCrowdSec Analysis

CVE-2025-49071 is an unrestricted file upload vulnerability in the NasaTheme Flozen theme, allowing attackers to upload malicious files such as web shells to the server. Exploiting this flaw could enable remote code execution, giving attackers full control over the affected web server and potentially leading to data theft or further compromise.

CrowdSec has been tracking this vulnerability and its exploits since 8th of April 2026.

CrowdSec has not observed any significant exploitation activity targeting CVE-2025-49071 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.

Attackers exploit vulnerable Flozen WordPress themes by uploading a malicious ZIP file via the /wp-admin/admin-ajax.php endpoint, abusing the wp_handle_upload action to deploy a webshell at /wp-content/uploads/nasa-custom-fonts/shadow/index.php.

lock

Full Intelligence Available

Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.

EventDate
CVE Published2025-06-17
Rule Released2026-04-08

Related Weaknesses

CWE-434: Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

arrow_forward

Remediation & Protection

lock to download blocklists, subscribe to firewalls, and access IP intelligence.

External References