Read the docs

postmagthemes

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

postmagthemes records in CISA KEV

No postmagthemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Postmagthemes Demo Import 1 record HIGH

Records

1 record in Postmagthemes Demo Import · all components

TI-2022-01412 CVE-2022-1540 · GHSA-wpw9-595f-g34r

PostmagThemes Demo <= 1.0.7 - Admin+ Arbitrary File Upload

Priority HIGH 67

The PostmagThemes Demo Import WordPress plugin through 1.0.7 does not validate the imported file, allowing high-privilege users such as admin to upload arbitrary files (such as PHP) leading to RCE.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01116 Published 2022-12-05 No fix listed
Open these records in search →