CVE-2025-7441 | StoryChief Plugin up to 1.0.42 on WordPress API Endpoint webhook unrestricted upload

A vulnerability classified as critical was found in StoryChief Plugin up to 1.0.42 on WordPress. Affected by this vulnerability is an unknown functionality of the file /wp-json/storychief/webhook of the component API Endpoint. The manipulation leads to unrestricted upload.

This vulnerability is known as CVE-2025-7441. The attack can be launched remotely. There is no exploit available.