Platform
wordpress
Component
medcity
Fixed in
1.1.10
CVE-2025-58963 describes an Arbitrary File Access vulnerability within the 7oroof Medcity application. This flaw allows attackers to upload files of any type, including malicious web shells, directly to the web server. Versions of Medcity between 0.0.0 and 1.1.9 are affected. A patch is available, resolving this critical security risk.
The impact of CVE-2025-58963 is severe. Successful exploitation allows an attacker to upload a web shell, granting them remote code execution (RCE) capabilities on the affected server. This can lead to complete system compromise, including data exfiltration, modification, and destruction. Attackers could leverage the web shell to pivot to other systems within the network, leading to lateral movement and a significantly expanded blast radius. The ability to upload arbitrary files bypasses standard security controls, making this a particularly dangerous vulnerability. The ease of uploading a web shell drastically lowers the barrier to entry for attackers, even those with limited technical expertise.
CVE-2025-58963 was published on 2025-10-22. The vulnerability's critical CVSS score (10) indicates a high probability of exploitation. Public proof-of-concept (POC) code is likely to emerge quickly given the ease of exploitation. The vulnerability is not currently listed on KEV or EPSS, but its critical severity warrants close monitoring. Active campaigns targeting this vulnerability are possible, especially given the ease of exploitation and potential for significant impact.
Exploit Status
EPSS
0.05% (16% percentile)
CISA SSVC
CVSS Vector
The primary mitigation for CVE-2025-58963 is to immediately upgrade to version 1.1.9 or later. If upgrading is not immediately feasible, implement temporary workarounds to reduce the risk. Restrict file uploads to only explicitly allowed file types and sizes. Implement strict input validation on all uploaded files to prevent malicious code execution. Consider using a Web Application Firewall (WAF) with rules to block suspicious file uploads and web shell activity. Monitor file system activity for unexpected file creations or modifications, particularly in upload directories. After upgrading, confirm the vulnerability is resolved by attempting to upload a test file and verifying that it is rejected or handled securely.
Actualice el tema Medcity a una versión superior a 1.1.9 para mitigar la vulnerabilidad de carga arbitraria de archivos. Verifique la fuente del tema y asegúrese de que sea de confianza. Implemente medidas de seguridad adicionales, como la validación de archivos cargados, para prevenir futuros ataques.
Vulnerability analysis and critical alerts directly to your inbox.
It's a critical Arbitrary File Access vulnerability in 7oroof Medcity allowing attackers to upload malicious files, potentially leading to remote code execution.
If you are using 7oroof Medcity versions 0.0.0 through 1.1.9, you are vulnerable to this exploit.
Upgrade to version 1.1.9 or later to resolve the vulnerability. Implement temporary workarounds like restricting file uploads if immediate upgrade isn't possible.
While no active campaigns are confirmed, the vulnerability's critical severity and ease of exploitation suggest it's a high-risk target.
Refer to the official 7oroof security advisory and the NVD entry for CVE-2025-58963 for detailed information.
Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.
Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.