A vulnerability, which was classified as critical, has been found in Eric Teubert Podlove Podcast Publisher Plugin up to 4.2.6 on WordPress. This affects the function
move_as_original_file
. The manipulation leads to unrestricted upload.
This vulnerability is listed as CVE-2025-10147. The attack may be initiated remotely. There is no available exploit.