Netskope Threat Labs

SERVER-WEBAPP WordPress FlexQR code generator arbitrary PHP file upload attempt

IPS-NPA

1 SID: 66069

Description

Detects an attempt to exploit CVE-2025-10041, an arbitrary file upload flaw that can plant webshells on the server in WordPress FlexQR code generator arbitrary PHP.

CVEs

CVE-2025-10041

References