Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder
4 known vulnerabilities.
1 result · Clear filters · Feed
-
High 8.8
Supreme Modules Lite <= 2.5.62 - Authenticated (Author+) Arbitrary File Upload via JSON Upload Bypass
The Supreme Modules Lite plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 2.5.62. This is due to insufficient file type validation detecting JSON files, allowing double extension files to bypass sanitization wh…