← WordPress Vulnerabilities
WordPress security by component

Alchemist Ajax Upload

Alchemist Ajax Upload is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jan 24, 2026; the highest CVE/CNA score is 5.3.

Plugin slug: alchemist-ajax-upload

CVE-2025-14629: Alchemist Ajax Upload: A security weakness

Alchemist Ajax Upload is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedJan 24, 2026
Safe version guidanceSee mitigation notes
Safe version
Jan 24, 2026 CVE-2025-14629
Alchemist Ajax Upload: A security weakness
Alchemist Ajax Upload is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.3
NVDPending