CVE-2022-1540

The PostmagThemes Demo Import WordPress plugin through 1.0.7 does not validate the imported file, allowing high-privilege users such as admin to upload arbitrary files (such as PHP) leading to RCE.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:postmagthemes:postmagthemes_demo_import:*:*:*:*:*:wordpress:*:*

Information

Published : 2022-12-05 09:15

Updated : 2022-12-06 09:30


NVD link : CVE-2022-1540

Mitre link : CVE-2022-1540


JSON object : View

CWE
CWE-434

Unrestricted Upload of File with Dangerous Type

Advertisement

dedicated server usa

Products Affected

postmagthemes

  • postmagthemes_demo_import