Lucene search

CVE-2022-0316

🗓️ 23 Jan 2023 15:13:15Reported by WPScanType

cve🔗 web.nvd.nist.gov👁 75 Views🌐 WEB

The WeStand, footysquare, aidreform, statfort, club-theme, kingclub-theme, spikes, soundblast, bolster WordPress themes are vulnerable to unauthenticated file uploa

Reporter	Title	Published	Views	Family All 20
NVD	CVE-2022-0316	23 Jan 202315:15	–	nvd
Patchstack	WordPress footysquare Theme < 10 is vulnerable to Arbitrary File Upload	29 Dec 202200:00	–	patchstack
Patchstack	WordPress WeStand Theme < 2.1 is vulnerable to Arbitrary File Upload	29 Dec 202200:00	–	patchstack
Patchstack	WordPress club-theme Theme < 10 is vulnerable to Arbitrary File Upload	29 Dec 202200:00	–	patchstack
Patchstack	WordPress bolster Theme < 10 is vulnerable to Arbitrary File Upload	29 Dec 202200:00	–	patchstack
Patchstack	WordPress aidreform Theme < 10 is vulnerable to Arbitrary File Upload	29 Dec 202200:00	–	patchstack
Patchstack	WordPress statfort Theme < 10 is vulnerable to Arbitrary File Upload	29 Dec 202200:00	–	patchstack
Patchstack	WordPress kingclub-theme Theme < 10 is vulnerable to Arbitrary File Upload	29 Dec 202200:00	–	patchstack
Patchstack	WordPress spikes-black Theme < 10 is vulnerable to Arbitrary File Upload	29 Dec 202200:00	–	patchstack
Patchstack	WordPress spikes Theme < 10 is vulnerable to Arbitrary File Upload	29 Dec 202200:00	–	patchstack

Nvd

Vulners

Node

aidreform_project aidreformMatch-wordpress

chimpgroup bolsterMatch-wordpress

chimpgroup spikesMatch-wordpress

chimpgroup westandRange<2.1wordpress

club-theme_project club-themeMatch-wordpress

footysquare_project footysquareMatch-wordpress

pixfill kings_clubMatch-wordpress

soundblast_project soundblastMatch-wordpress

spikes-black_project spikes-blackMatch-wordpress

statfort_project statfortMatch-wordpress

[
  {
    "vendor": "Unknown",
    "product": "WeStand",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "2.1"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Unknown",
    "product": "footysquare",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Unknown",
    "product": "aidreform",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Unknown",
    "product": "statfort",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Unknown",
    "product": "club-theme",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Unknown",
    "product": "kingclub-theme",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Unknown",
    "product": "spikes",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Unknown",
    "product": "spikes-black",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Unknown",
    "product": "soundblast",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Unknown",
    "product": "bolster",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "affected"
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/9ab3d6cf-aad7-41bc-9aae-dc5313f12f7c

Parameter	Position	Path	Description	CWE
mofile[]	binary	/wp-content/themes/westand/include/lang_upload.php	Unauthenticated file upload vulnerability allowing attackers to upload arbitrary files on the server.	CWE-434, CWE-20

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Jan 2023 15:15Current

9.5High risk

Vulners AI Score9.5

CVSS39.8

EPSS0.33341