7.2
CVE-2022-1540
- EPSS 0.9%
- Veröffentlicht 05.12.2022 17:15:09
- Zuletzt bearbeitet 23.04.2025 15:15:47
- Quelle contact@wpscan.com
- CVE-Watchlists
- Unerledigt
LoginPostmagThemes Demo Import <= 1.0.7 - Authenticated (Administrator+) Arbitrary File Upload
The PostmagThemes Demo Import WordPress plugin through 1.0.7 does not validate the imported file, allowing high-privilege users such as admin to upload arbitrary files (such as PHP) leading to RCE.
Mögliche Gegenmaßnahme
PostmagThemes Demo Import: Update to version 1.0.8, or a newer patched version
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt
PostmagThemes Demo Import
Version
*-1.0.7
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Postmagthemes ≫ Postmagthemes Demo Import SwPlatformwordpress Version <= 1.0.7
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.9% | 0.75 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.2 | 1.2 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 7.2 | 1.2 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|