Логотип exploitDog
bind:CVE-2022-1538
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-1538

Количество 2

Количество 2

nvd логотип

CVE-2022-1538

около 2 лет назад

Theme Demo Import WordPress plugin before 1.1.1 does not validate the imported file, allowing high-privilege users such as admin to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disallowed.

CVSS3: 7.2
EPSS: Низкий
github логотип

GHSA-4vqv-h9wj-9855

около 2 лет назад

Theme Demo Import WordPress plugin before 1.1.1 does not validate the imported file, allowing high-privilege users such as admin to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disallowed.

CVSS3: 7.2
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2022-1538

Theme Demo Import WordPress plugin before 1.1.1 does not validate the imported file, allowing high-privilege users such as admin to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disallowed.

CVSS3: 7.2
1%
Низкий
около 2 лет назад
github логотип
GHSA-4vqv-h9wj-9855

Theme Demo Import WordPress plugin before 1.1.1 does not validate the imported file, allowing high-privilege users such as admin to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disallowed.

CVSS3: 7.2
1%
Низкий
около 2 лет назад

Уязвимостей на страницу