← Database

CVE-2022-1008

HIGH CVSS: 7.2 Published: 2022-04-11 Modified: 2026-06-17

Description

The One Click Demo Import WordPress plugin before 3.1.0 does not validate the imported file, allowing high privilege users such as admin to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disallowed

Affected Platforms

Ocdi One Click Demo Import

Weakness Type

CWE-434

References