CVE-2025-8889 — The Compress & Upload WordPress plugin before 1.0.5 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they sh — CVE Database · The Intelligence Room