CVE-2022-1008CWE-434

One Click Demo Import < 3.1.0 - Admin+ Arbitrary File Upload

published April 11, 2022

CVSS
—
EPSS
2%
Percentile
76.7
In the wild
Unconfirmed
What it is

The One Click Demo Import WordPress plugin before 3.1.0 does not validate the imported file, allowing high privilege users such as admin to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disallowed

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01679 · 76.7th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2022-04-11T14:41Z
EPSS history
Timeline
  • 11 APR 14:41Z
    One Click Demo Import < 3.1.0 - Admin+ Arbitrary File Upload
    cvelistv5