7.2

CVE-2022-0440

Exploit

Catch Themes Demo Import < 2.1.1 - Admin+ Remote Code Execution

Catch Themes Demo Import <= 2.1 - Authenticated (Admin+) Arbitrary File Upload

The Catch Themes Demo Import WordPress plugin before 2.1.1 does not validate one of the file to be imported, which could allow high privivilege admin to upload an arbitrary PHP file and gain RCE even in the case of an hardened blog (ie DISALLOW_UNFILTERED_HTML, DISALLOW_FILE_EDIT and DISALLOW_FILE_MODS constants set to true)
Mögliche Gegenmaßnahme
Catch Themes Demo Import: Update to version 2.1.1, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Catchplugins ≫ Catch Themes Demo Import SwPlatformwordpress Version < 2.1.1
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt Catch Themes Demo Import
Version [*, 2.1.1)
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.42% 0.693
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 1.2 5.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 6.5 8 6.4
AV:N/AC:L/Au:S/C:P/I:P/A:P
CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

https://wpscan.com/vulnerability/2239095f-8a66-4a5d-ab49-1662a40fddf1
Third Party Advisory
Exploit
https://www.wordfence.com/threat-intel/vulnerabilities/id/c7f10f62-98cf-4629-9a48-59a42490276d
Third Party Advisory