Skip to content
OpenAdvisories

Archive

21 October 2021

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 7.2
    CVE-2021-39352 Public exploit EPSS 56%

    Catch Themes Demo Import <= 1.7 Admin+ Arbitrary File Upload

    The Catch Themes Demo Import WordPress plugin is vulnerable to arbitrary file uploads via the import functionality found in the ~/inc/CatchThemesDemoImport.php file, in versions up to and including 1.7, due to insufficient file type validation. This makes it …