critical9.8
CVE-2022-0316
The WeStand WordPress theme before 2.1, footysquare WordPress theme, aidreform WordPress theme, statfort WordPress theme, club-theme WordPress theme, kingclub-…
Impact
The WeStand WordPress theme before 2.1, footysquare WordPress theme, aidreform WordPress theme, statfort WordPress theme, club-theme WordPress theme, kingclub-theme WordPress theme, spikes WordPress theme, spikes-black WordPress theme, soundblast WordPress theme, bolster WordPress theme from ChimpStudio and PixFill does not have any authorisation and upload validation in the lang_upload.php file, allowing any unauthenticated attacker to upload arbitrary files to the web server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aidreform Project | Aidreform | All versions |
| Chimpgroup | Bolster | All versions |
| Chimpgroup | Spikes | All versions |
| Chimpgroup | Westand | before 2.1 |
| Club-Theme Project | Club-Theme | All versions |
| Footysquare Project | Footysquare | All versions |
| Pixfill | Kings Club | All versions |
| Soundblast Project | Soundblast | All versions |
| Spikes-Black Project | Spikes-Black | All versions |
| Statfort Project | Statfort | All versions |