CVE-2022-0440

The Catch Themes Demo Import WordPress plugin before 2.1.1 does not validate one of the file to be imported, which could allow high privivilege admin to upload an arbitrary PHP file and gain RCE even in the case of an hardened blog (ie DISALLOW_UNFILTERED_HTML, DISALLOW_FILE_EDIT and DISALLOW_FILE_MODS constants set to true)

CVSS v3.1

7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

1.44% chance of exploitation in the next 30 days, 71th percentile

Published

2022-03-07

Updated

2024-08-02

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/2239095f-8a66-4a5d-ab49-1662a40fddf1

References

• CVE Record
• NVD entry

Related

• CVE-2022-0439
• CVE-2022-0441
• CVE-2022-0437
• CVE-2022-0442
• CVE-2022-0436
• CVE-2022-0443