Themely

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Themely records in CISA KEV

No Themely vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Theme Demo Import 2 records MEDIUM

Records

2 records in Theme Demo Import · all components

TI-2023-12739 CVE-2023-28170 · GHSA-q573-xfg5-jv9w

WordPress Theme Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload

MEDIUM 41

Unrestricted Upload of File with Dangerous Type vulnerability in Themely Theme Demo Import.This issue affects Theme Demo Import: from n/a through 1.1.1.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00789 Published 2023-12-20 No fix listed CWE-434

TI-2022-01410 CVE-2022-1538 · GHSA-4vqv-h9wj-9855

Theme-Demo-Importer < 1.1.1 - Admin+ Arbitrary File Upload

LOW 34

Theme Demo Import WordPress plugin before 1.1.1 does not validate the imported file, allowing high-privilege users such as admin to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disallowed.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.012 Published 2024-01-16 Fixed in 1.1.1 CWE-434

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0