Accesspressthemes

Access Demo Importer

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2022-23975

  • EPSS 0.18%
  • Published 18.04.2022 17:15:16
  • Last modified 21.11.2024 06:49:35

Cross-Site Request Forgery (CSRF) in Access Demo Importer <= 1.0.7 on WordPress allows an attacker to activate any installed plugin.

8.1

CVE-2022-23976

  • EPSS 0.21%
  • Published 18.04.2022 17:15:16
  • Last modified 21.11.2024 06:49:35

Cross-Site Request Forgery (CSRF) in Access Demo Importer <= 1.0.7 on WordPress allows an attacker to reset all data (posts / pages / media).

8.8

CVE-2021-39317

Exploit
  • EPSS 0.65%
  • Published 11.10.2021 16:15:07
  • Last modified 21.11.2024 06:19:13

A WordPress plugin and several WordPress themes developed by AccessPress Themes are vulnerable to malicious file uploads via the plugin_offline_installer AJAX action due to a missing capability check in the plugin_offline_installer_callback function ...