Description
The WeStand WordPress theme before 2.1, footysquare WordPress theme, aidreform WordPress theme, statfort WordPress theme, club-theme WordPress theme, kingclub-theme WordPress theme, spikes WordPress theme, spikes-black WordPress theme, soundblast WordPress theme, bolster WordPress theme from ChimpStudio and PixFill does not have any authorisation and upload validation in the lang_upload.php file, allowing any unauthenticated attacker to upload arbitrary files to the web server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WeStand | < 2.1 | 2.1 |
| — | footysquare | — | — |
| — | aidreform | — | — |
| — | statfort | — | — |
| — | club-theme | — | — |
| — | kingclub-theme | — | — |
| — | spikes | — | — |
| — | spikes-black | — | — |
| — | soundblast | — | — |
| — | bolster | — | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 1 repository
-
KTN1990/CVE-2022-0316_wordpress_multiple_themes_exploit ★ 12 · Feb 8, 2023
( Wordpress Exploit ) Wordpress Multiple themes - Unauthenticated Arbitrary File Upload
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- https://wpscan.com/vulnerability/9ab3d6cf-aad7-41bc-9aae-dc5313f12f7c exploit vdb-entry technical-description