A vulnerability was found in WavePlayer Plugin up to 3.7.x on WordPress. It has been declared as critical. This affects an unknown function. Such manipulation leads to unrestricted upload.
This vulnerability is uniquely identified as CVE-2025-12057. The attack can be launched remotely. No exploit exists.
It is recommended to upgrade the affected component.
