CVE-2021-39352

The Catch Themes Demo Import WordPress plugin is vulnerable to arbitrary file uploads via the import functionality found in the /inc/CatchThemesDemoImport.php file, in versions up to and including 1.7, due to insufficient file type validation. This makes it possible for an attacker with...

CVE-2021-39352: Unrestricted Upload of File with Dangerous Type

The Catch Themes Demo Import WordPress plugin is vulnerable to arbitrary file uploads via the import functionality found in the /inc/CatchThemesDemoImport.php file, in versions up to and including 1.7, due to insufficient file type validation. This makes it possible for an attacker with...

PT-2021-22558

Name of the Vulnerable Software and Affected Versions: Catch Themes Demo Import WordPress plugin versions up to and including 1.7 Description: The issue is related to arbitrary file uploads via the import functionality found in the /inc/CatchThemesDemoImport.php file, due to insufficient file typ...