high7.2
CVE-2022-1540
The PostmagThemes Demo Import WordPress plugin through 1.0.7 does not validate the imported file, allowing high-privilege users such as admin to upload arbitra…
Impact
The PostmagThemes Demo Import WordPress plugin through 1.0.7 does not validate the imported file, allowing high-privilege users such as admin to upload arbitrary files (such as PHP) leading to RCE.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Postmagthemes | Postmagthemes Demo Import | through 1.0.7 |