Theme-Demo-Importer < 1.1.1 - Admin+ Arbitrary File Upload

2022-11-0800:00:00

ccltt1201

186

theme-demo-importer

admin

arbitrary file upload

appearance

xml file import

php file

malicious code

exploit

security vulnerability

website security

0.001 Low

EPSS

Percentile

19.4%

JSON

The plugin does not validate the imported file, allowing high-privilege users such as admin to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disallowed.

1. Navigate to: Appearance >Import Demo Content > Theme Demo Importer > Manually upload the demo files

2. Use the XML file import option to upload a PHP file containing this content:
<?php phpinfo();?>

3. Find the file at https://example.com/wp-content/uploads/YYYY/MM/your-file.php

0.001 Low

EPSS

Percentile

19.4%

JSON

Related for WPEX-ID:B19ADF7C-3983-487B-9B46-0F2922B08C1C