Catch Themes Demo Import vulnerabilities
We track 1 vulnerability in Catch Themes Demo Import products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 7, 2022.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest Catch Themes Demo Import vulnerabilities
- 7.2 High severity
Catch Themes Demo Import: Unrestricted Upload of File with Dangerous Type
The Catch Themes Demo Import WordPress plugin before 2.1.1 does not validate one of the file to be imported, which could allow high privivilege admin to upload an arbitrary PHP file and gain RCE even in the case of an hardened blog (ie DISALLOW_UNFILTERED_HTML