Axlethemes

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Axlethemes records in CISA KEV

No Axlethemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Axle Demo Importer 1 record MEDIUM

Records

1 record

TI-2025-04442 CVE-2025-4954 · GHSA-93gr-9vgp-hf59

Axle Demo Importer <= 1.0.3 - Author+ Arbitrary File Upload

MEDIUM 41

The Axle Demo Importer WordPress plugin through 1.0.3 does not validate files to be uploaded, which could allow authenticated users (author and above) to upload arbitrary files such as PHP on the server

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00635 Published 2025-06-10 No fix listed CWE-434

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0