Filtered by vendor Ocdi Subscriptions
Filtered by product One Click Demo Import Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-1008 1 Ocdi 1 One Click Demo Import 2024-08-02 7.2 High
The One Click Demo Import WordPress plugin before 3.1.0 does not validate the imported file, allowing high privilege users such as admin to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disallowed