Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-10147 — Podlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Upload | Kitploit
Tools/GitHubGitHub/ghostpel-sec/cve-2025-10147
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & Education
GitHubghostpel-sec/cve-2025-10147

CVE-2025-10147

Podlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Upload

View Repository
5 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-10147

Podlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Upload

The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'move_as_original_file' function in all versions up to, and including, 4.2.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

CVE CVE-2025-10147 CVSS 9.8 (Critical) Publicly Published September 22, 2025 Last Updated September 23, 2025 Researcher Arkadiusz Hydzik

How To Use

root@kitploit:~
git clone https://github.com/ghostpel-sec/CVE-2025-10147.git
root@kitploit:~
pip install requests
root@kitploit:~
python3 ghostpelsec.py

Shell Url

root@kitploit:~
https://pub-d19c0c8b20f742b7abe6b358019ec3be.r2.dev/ghostpelsec.gif.php

⚠️ DISCLAIMER

This tool is developed for EDUCATIONAL PURPOSES ONLY to demonstrate security vulnerabilities.

🚨 LEGAL WARNING

  • UNAUTHORIZED USE IS ILLEGAL - Using this tool against systems without explicit permission violates computer crime laws worldwide.
  • USER RESPONSIBILITY - You are solely responsible for complying with all applicable laws and regulations.
  • NO LIABILITY - The author assumes no liability for any misuse or damages caused by this tool.

✅ PROPER USE

  • ✓ Your own systems
  • ✓ Authorized penetration testing
  • ✓ Educational/lab environments

❌ IMPROPER USE

  • ✗ Systems you don't own
  • ✗ Without written permission
  • ✗ Any illegal activity

By using this tool, you agree to these terms.

Stay legal, stay ethical, stay safe.

Download Tool