One Click Demo Import vulnerabilities
We track 1 vulnerability in One Click Demo Import products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 11, 2022.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest One Click Demo Import vulnerabilities
- 7.2 High severity
One Click Demo Import: Unrestricted Upload of File with Dangerous Type
The One Click Demo Import WordPress plugin before 3.1.0 does not validate the imported file, allowing high privilege users such as admin to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disallowed