VULNERABILITY INTELLIGENCE

CVE-2022-1538

CVSS score7.2 HIGH

EPSS probability1.20%

CISA KEVNot currently listed

Published2024-01-16

Last modified2026-06-17

Description

Theme Demo Import WordPress plugin before 1.1.1 does not validate the imported file, allowing high-privilege users such as admin to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disallowed.