Lucene search
PRIOn knowledge basePRION:CVE-2022-1565HistoryJul 18, 2022 - 5:15 p.m.
Input validation
2022-07-1817:15:00
PRIOn knowledge base
www.prio-n.com
5
The plugin WP All Import is vulnerable to arbitrary file uploads due to missing file type validation via the wp_all_import_get_gz.php file in versions up to, and including, 3.6.7. This makes it possible for authenticated attackers, with administrator level permissions and above, to upload arbitrary files on the affected sites server which may make remote code execution possible.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp_all_import | lt | 3.6.8 |
Related
packetstorm
packetstorm
WordPress WP All Import 3.6.7 Remote Code Execution
2023-03-30 00:00:00
openvas
openvas
zdt
zdt
WordPress WP All Import v3.6.7 - Remote Code Execution Exploit
2023-03-29 00:00:00
cvelist
cvelist
CVE-2022-1565
2022-07-18 00:00:00
nvd
nvd
CVE-2022-1565
2022-07-18 17:15:08
githubexploit
githubexploit
cve
cve
CVE-2022-1565
2022-07-18 17:15:08
patchstack
patchstack
exploitdb
exploitdb
WP All Import v3.6.7 - Remote Code Execution (RCE) (Authenticated)
2023-03-29 00:00:00