2 matches found
CVE-2022-2440
CVE-2022-2440 affects the WordPress Theme Editor plugin up to version 2.8 and enables deserialization of untrusted input via the images_array parameter. The flaw allows authenticated administrators to upload a serialized payload that, when wrapped in PHAR, is deserialized and can call arbitrary P...
CVE-2021-24154
The Theme Editor WordPress plugin (