Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:45 a.m.10 views

CVE-2022-0440

The Catch Themes Demo Import WordPress plugin before 2.1.1 does not validate one of the file to be imported, which could allow high privivilege admin to upload an arbitrary PHP file and gain RCE even in the case of an hardened blog ie DISALLOWUNFILTEREDHTML, DISALLOWFILEEDIT and DISALLOWFILEMODS...

7.2CVSS7.1AI score0.00875EPSS
Exploits2References1
NVD
NVD
added 2022/03/07 9:15 a.m.12 views

CVE-2022-0440

The Catch Themes Demo Import WordPress plugin before 2.1.1 does not validate one of the file to be imported, which could allow high privivilege admin to upload an arbitrary PHP file and gain RCE even in the case of an hardened blog ie DISALLOWUNFILTEREDHTML, DISALLOWFILEEDIT and DISALLOWFILEMODS...

7.2CVSS0.00875EPSS
Exploits2References1
OSV
OSV
added 2022/03/07 9:15 a.m.1 views

CVE-2022-0440

The Catch Themes Demo Import WordPress plugin before 2.1.1 does not validate one of the file to be imported, which could allow high privivilege admin to upload an arbitrary PHP file and gain RCE even in the case of an hardened blog ie DISALLOWUNFILTEREDHTML, DISALLOWFILEEDIT and DISALLOWFILEMODS...

7.2CVSS7.1AI score0.00875EPSS
Exploits2References1
Cvelist
Cvelist
added 2022/03/07 8:16 a.m.10 views

CVE-2022-0440 Catch Themes Demo Import < 2.1.1 - Admin+ Remote Code Execution

The Catch Themes Demo Import WordPress plugin before 2.1.1 does not validate one of the file to be imported, which could allow high privivilege admin to upload an arbitrary PHP file and gain RCE even in the case of an hardened blog ie DISALLOWUNFILTEREDHTML, DISALLOWFILEEDIT and DISALLOWFILEMODS...

7.4AI score0.00875EPSS
Exploits2References1
CVE
CVE
added 2022/03/07 8:16 a.m.92 views

CVE-2022-0440

Affected software. Catch Themes Demo Import WordPress plugin (versions before 2.1.1). Root cause. The plugin does not validate one of the files to be imported, enabling an elevated-privilege admin to upload an arbitrary PHP file. Impact. Remote Code Execution (RCE) potentially even on hardened Wo...

7.2CVSS7.2AI score0.00875EPSS
Exploits2References1Affected Software1
Photon
Photon
added 2022/02/07 12:0 a.m.54 views

Important Photon OS Security Update - PHSA-2022-0440

Updates of 'go', 'linux-aws', 'linux', 'polkit', 'linux-esx', 'apache-tomcat', 'linux-secure' packages of Photon OS have been released...

9CVSS1.7AI score0.54322EPSS
Exploits15
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:0 a.m.29 views

RHEL 8 : aide (RHSA-2022:0440)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:0440 advisory. Advanced Intrusion Detection Environment AIDE is a utility that creates a database of files on the system, and then uses that database to ensure file...

7.8CVSS7.9AI score0.00038EPSS
Exploits1References4
Rows per page
Query Builder