CVE-2022-0316

CVE-2022-0316 affects multiple WordPress themes from ChimpStudio and PixFill (WeStand before 2.1, footysquare, aidreform, statfort, club-theme, kingclub-theme, spikes, spikes-black, soundblast, bolster). The root cause is lack of authorization and upload validation in lang_upload.php, allowing an...