Cozmoslabs WP Webhooks Path Traversal Vulnerability Allowing Unrestricted File Upload
Vulnerability
A vulnerability in the Cozmoslabs WP Webhooks plugin, specifically in versions through 3.3.8, allows for unrestricted file uploads of dangerous types, coupled with path traversal. This could potentially lead to the execution of malicious files on the server.
Impact
Exploitation of this vulnerability could result in arbitrary file uploads, including potentially malicious files that could be executed on the server.
Added: Dec 18, 2025, 8:23 AM
Updated: Dec 18, 2025, 3:29 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
7.4remediation
0.0relevance
1.5threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.