7.2
Élevée
CVE-2022-1540 The PostmagThemes Demo Import WordPress plugin through 1.0.7 does not validate the imported file, allowing…
Description
The PostmagThemes Demo Import WordPress plugin through 1.0.7 does not validate the imported file, allowing high-privilege users such as admin to upload arbitrary files (such as PHP) leading to RCE.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| PostmagThemes Demo Import 1.0 | premières → 1.0.7 | Pas de correctif indiqué |