CVE-2022-0440

HIGH

7.2

Description

The Catch Themes Demo Import WordPress plugin before 2.1.1 does not validate one of the file to be imported, which could allow high privivilege admin to upload an arbitrary PHP file and gain RCE even in the case of an hardened blog (ie DISALLOW_UNFILTERED_HTML, DISALLOW_FILE_EDIT and DISALLOW_FILE_MODS constants set to true)

CVE Details

CVSS v3.1 Score7.2

SeverityHIGH

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredHIGH

User InteractionNONE

Published3/7/2022

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

catchplugins:catch_themes_demo_import

Weaknesses (CWE)

CWE-434CWE-434

References

https://wpscan.com/vulnerability/2239095f-8a66-4a5d-ab49-1662a40fddf1(contact@wpscan.com)

https://wpscan.com/vulnerability/2239095f-8a66-4a5d-ab49-1662a40fddf1(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.