Lucene search
PRIOn knowledge basePRION:CVE-2022-0440HistoryMar 07, 2022 - 9:15 a.m.
Design/Logic Flaw
2022-03-0709:15:00
PRIOn knowledge base
www.prio-n.com
6
0.001 Low
EPSS
Percentile
42.9%
The Catch Themes Demo Import WordPress plugin before 2.1.1 does not validate one of the file to be imported, which could allow high privivilege admin to upload an arbitrary PHP file and gain RCE even in the case of an hardened blog (ie DISALLOW_UNFILTERED_HTML, DISALLOW_FILE_EDIT and DISALLOW_FILE_MODS constants set to true)
| CPE | Name | Operator | Version |
|---|---|---|---|
| catch_themes_demo_import | lt | 2.1.1 |
Related
cve
cve
CVE-2022-0440
2022-03-07 09:15:09
nvd
nvd
CVE-2022-0440
2022-03-07 09:15:09
wpexploit
wpexploit
Catch Themes Demo Import < 2.1.1 - Admin+ Remote Code Execution
2022-02-07 00:00:00
cvelist
cvelist
wpvulndb
wpvulndb
Catch Themes Demo Import < 2.1.1 - Admin+ Remote Code Execution
2022-02-07 00:00:00