← Database

CVE-2022-1540

HIGH CVSS: 7.2 Published: 2022-12-05 Modified: 2026-06-17

Description

The PostmagThemes Demo Import WordPress plugin through 1.0.7 does not validate the imported file, allowing high-privilege users such as admin to upload arbitrary files (such as PHP) leading to RCE.

Affected Platforms

Postmagthemes Postmagthemes Demo Import

Weakness Type

Unknown

References