Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-72210
HistoryMay 06, 2022 - 12:00 a.m.

WordPres Rara One Click Demo Imports plugin cross-site request forgery vulnerability

2022-05-0600:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
wordpress
rara one
cross-site request forgery
file upload
vulnerability

EPSS

0.001

Percentile

39.6%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. version 1.2.9 and earlier of the Rara One Click Demo Imports plugin are vulnerable to cross-site request forgery, which could be exploited to trick an administrator user into uploading dangerous files to the / wp-content/uploads/ directory.

EPSS

0.001

Percentile

39.6%