CVE-2025-4391 | CodeRevolution Echo RSS Feed Post Generator Plugin up to 5.4.8.1 on WordPress echo_generate_featured_image unrestricted upload

A vulnerability was found in CodeRevolution Echo RSS Feed Post Generator Plugin up to 5.4.8.1 on WordPress. It has been classified as critical. This affects the function echo_generate_featured_image. The manipulation leads to unrestricted upload.

This vulnerability is uniquely identified as CVE-2025-4391. It is possible to initiate the attack remotely. There is no exploit available.