Lucene search
PRIOn knowledge basePRION:CVE-2022-1538HistoryJan 16, 2024 - 4:15 p.m.
Design/Logic Flaw
2024-01-1616:15:00
PRIOn knowledge base
www.prio-n.com
4
wordpress
plugin vulnerability
arbitrary file upload
high-privilege users
security flaw
Theme Demo Import WordPress plugin before 1.1.1 does not validate the imported file, allowing high-privilege users such as admin to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disallowed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| theme_demo_import | lt | 1.1.1 |
Related
cve
cve
CVE-2022-1538
2024-01-16 16:15:09
wpexploit
wpexploit
Theme-Demo-Importer < 1.1.1 - Admin+ Arbitrary File Upload
2022-11-08 00:00:00
cvelist
cvelist
CVE-2022-1538 Theme-Demo-Importer < 1.1.1 - Admin+ Arbitrary File Upload
2024-01-16 15:50:34
wpvulndb
wpvulndb
Theme-Demo-Importer < 1.1.1 - Admin+ Arbitrary File Upload
2022-11-08 00:00:00
nvd
nvd
CVE-2022-1538
2024-01-16 16:15:09