CVE-2025-4389 | Crawlomatic Multipage Scraper Post Generator Plugin crawlomatic_generate_featured_image unrestricted upload

A vulnerability was found in Crawlomatic Multipage Scraper Post Generator Plugin up to 2.6.8.1 on WordPress and classified as critical. Affected by this issue is the function crawlomatic_generate_featured_image. The manipulation leads to unrestricted upload.

This vulnerability is handled as CVE-2025-4389. The attack may be launched remotely. There is no exploit available.