Lucene search
BEE-K (Patchstack)PATCHSTACK:94A17EC193B3A53DB863628754F2359FHistoryApr 21, 2022 - 12:00 a.m.
WordPress Rara One Click Demo Import plugin <= 1.2.9 - Cross-Site Request Forgery (CSRF) leads to Arbitrary File Upload vulnerability
2022-04-2100:00:00
BEE-K (Patchstack)
patchstack.com
15
wordpress
rara one click demo import
csrf
arbitrary file upload
bee-k
update
EPSS
0.001
Percentile
39.6%
Cross-Site Request Forgery (CSRF) leads to Arbitrary File Upload vulnerability discovered in Rara One Click Demo Import plugin (versions <= 1.2.9) by BEE-K.
Solution
Update the WordPress Rara One Click Demo Import plugin to the latest available version (at least 1.3.0).
Related
cnvd
cnvd
prion
prion
Cross site request forgery (csrf)
2022-04-29 17:15:00
nvd
nvd
CVE-2022-29451
2022-04-29 17:15:22
wpvulndb
wpvulndb
Rara One Click Demo Import < 1.3.0 - Arbitrary File Upload via CSRF
2022-04-21 00:00:00
cvelist
cvelist
cve
cve
CVE-2022-29451
2022-04-29 17:15:22