CVE-2022-1008 — One Click Demo Import < 3.1.0 - Admin+ Arbitrary File Upload
The One Click Demo Import WordPress plugin before 3.1.0 does not validate the imported file, allowing high privilege users such as admin to upload arbitrary files (such as PHP) …
Published: 2022-04-11 · CVSS: Unscored
The One Click Demo Import WordPress plugin before 3.1.0 does not validate the imported file, allowing high privilege users such as admin to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disallowed
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7