CVE-2025-13376 | ProjectList Plugin up to 0.3.0 on WordPress unrestricted upload

A vulnerability was found in ProjectList Plugin up to 0.3.0 on WordPress. It has been classified as critical. This vulnerability affects unknown code. This manipulation causes unrestricted upload.

This vulnerability is tracked as CVE-2025-13376. The attack is possible to be carried out remotely. No exploit exists.