Vulnerabilities (CVE)

Filtered by vendor Ocdi Subscribe
Filtered by product One Click Demo Import
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-1008 1 Ocdi 1 One Click Demo Import 2024-11-21 6.5 MEDIUM 7.2 HIGH
The One Click Demo Import WordPress plugin before 3.1.0 does not validate the imported file, allowing high privilege users such as admin to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disallowed