OCDI

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

OCDI records in CISA KEV

No OCDI vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

One Click Demo Import 2 records LOW

Records

2 records

TI-2022-00907 CVE-2022-1008 · GHSA-qqj4-453q-5665

One Click Demo Import < 3.1.0 - Admin+ Arbitrary File Upload

LOW 35

The One Click Demo Import WordPress plugin before 3.1.0 does not validate the imported file, allowing high privilege users such as admin to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disal…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01679 Published 2022-04-11 Fixed in 3.1.0 CWE-434

TI-2024-22768 CVE-2024-34433 · GHSA-rc7p-84r6-38c5

WordPress One Click Demo Import plugin <=3.2.0 - PHP Object Injection vulnerability

LOW 32

Deserialization of Untrusted Data vulnerability in OCDI One Click Demo Import.This issue affects One Click Demo Import: from n/a through 3.2.0.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00495 Published 2024-05-09 No fix listed CWE-502

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0