A vulnerability, which was classified as critical, has been found in File Uploader for WooCommerce Plugin up to 1.0.3 on WordPress. This affects the function add-image-data of the component REST API Endpoint. Performing manipulation results in unrestricted upload.

This vulnerability was named CVE-2025-13329. The attack may be initiated remotely. There is no available exploit.