Skip to content
OpenAdvisories

Vendor

AIT Themes

3 known vulnerabilities.

Products

Citadela Listing 2 AIT CSV import/export 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2020-36849 Public exploit

    AIT CSV import/export <= 3.0.3 - Unauthenticated Arbitrary File Upload

    The AIT CSV import/export plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the /wp-content/plugins/ait-csv-import-export/admin/upload-handler.php file in versions up to, and including, 3.0.3. This makes it po…

    AIT Themes AIT CSV import/export Web / CMS