Lucene search
+L

CVE-2022-0440

🗓️ 07 Mar 2022 08:16:42Reported by WPScanType 
cve
 cve
🔗 web.nvd.nist.gov👁 110 Views🌐 WEB

The Catch Themes Demo Import WordPress plugin before 2.1.1 allows high privilege admin to upload arbitrary PHP file

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
attackerkb
ATTACKERKB
CVE-2022-0440
7 Mar 202209:15
attackerkb
cnnvd
CNNVD
WordPress plugin Catch Themes Demo Import 代码问题漏洞
7 Mar 202200:00
cnnvd
cvelist
Cvelist
CVE-2022-0440 Catch Themes Demo Import < 2.1.1 - Admin+ Remote Code Execution
7 Mar 202208:16
cvelist
euvd
EUVD
EUVD-2022-15579
3 Oct 202520:07
euvd
nvd
NVD
CVE-2022-0440
7 Mar 202209:15
nvd
osv
OSV
CVE-2022-0440
7 Mar 202209:15
osv
prion
Prion
Design/Logic Flaw
7 Mar 202209:15
prion
redhatcve
RedhatCVE
CVE-2022-0440
9 Jan 202610:45
redhatcve
wpexploit
wpexploit
Catch Themes Demo Import < 2.1.1 - Admin+ Remote Code Execution
7 Feb 202200:00
wpexploit
wpvulndb
WPVulnDB
Catch Themes Demo Import < 2.1.1 - Admin+ Remote Code Execution
7 Feb 202200:00
wpvulndb
NVD
Vulners
Node
[
  {
    "product": "Catch Themes Demo Import",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "2.1.1",
        "status": "affected",
        "version": "2.1.1",
        "versionType": "custom"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
widget_fileupload datawp-admin/admin-ajax.phpUpload of an arbitrary PHP file via the ctdi_import_demo_data action leading to remote code execution (RCE) in the Catch Themes Demo Import WordPress plugin.CWE-434
redux_fileupload datawp-admin/admin-ajax.phpUpload of an arbitrary PHP file via the ctdi_import_demo_data action leading to remote code execution (RCE) in the Catch Themes Demo Import WordPress plugin.CWE-434

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 04:20Current
7.2High risk
Vulners AI Score7.2
CVSS 26.5
CVSS 3.17.2
EPSS0.01442
110