A vulnerability, which was classified as critical, has been found in Eric Teubert Podlove Podcast Publisher Plugin up to 4.2.6 on WordPress. This affects the function move_as_original_file. The manipulation leads to unrestricted upload.

This vulnerability is listed as CVE-2025-10147. The attack may be initiated remotely. There is no available exploit.