CVE-2022-0316 - Vulnerability Details - OpenCVE

The WeStand WordPress theme before 2.1, footysquare WordPress theme, aidreform WordPress theme, statfort WordPress theme, club-theme WordPress theme, kingclub-theme WordPress theme, spikes WordPress theme, spikes-black WordPress theme, soundblast WordPress theme, bolster WordPress theme from ChimpStudio and PixFill does not have any authorisation and upload validation in the lang_upload.php file, allowing any unauthenticated attacker to upload arbitrary files to the web server.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.23032.

Exploitation poc

Automatable no

Technical Impact partial

Vendors	Products
Aidreform Project	Aidreform
Chimpgroup	Bolster Spikes Westand
Club-theme Project	Club-theme
Footysquare Project	Footysquare
Pixfill	Kings Club
Soundblast Project	Soundblast
Spikes-black Project	Spikes-black
Statfort Project	Statfort

Configuration 1 [-]

OR	cpe:2.3:a:aidreform_project:aidreform:-:::::wordpress::
	cpe:2.3:a:chimpgroup:bolster:-:::::wordpress::
	cpe:2.3:a:chimpgroup:spikes:-:::::wordpress::
	cpe:2.3:a:chimpgroup:westand::::::wordpress::*
	cpe:2.3:a:club-theme_project:club-theme:-:::::wordpress::
	cpe:2.3:a:footysquare_project:footysquare:-:::::wordpress::
	cpe:2.3:a:pixfill:kings_club:-:::::wordpress::
	cpe:2.3:a:soundblast_project:soundblast:-:::::wordpress::
	cpe:2.3:a:spikes-black_project:spikes-black:-:::::wordpress::
	cpe:2.3:a:statfort_project:statfort:-:::::wordpress::

No data.

No data.

References

Link	Providers
https://wpscan.com/vulnerability/9ab3d6cf-aad7-41bc-9aae-dc5313f12f7c

History

Thu, 03 Apr 2025 20:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: WPScan

Published: 2023-01-23T14:48:05.590Z

Updated: 2025-04-03T19:12:48.241Z

Reserved: 2022-01-20T09:29:34.686Z

Link: CVE-2022-0316

Vulnrichment

Updated: 2024-08-02T23:25:39.589Z

NVD

Status : Modified

Published: 2023-01-23T15:15:13.703

Modified: 2025-04-03T20:15:16.417

Link: CVE-2022-0316

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2022-0316", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "state": "PUBLISHED", "assignerShortName": "WPScan", "dateReserved": "2022-01-20T09:29:34.686Z", "datePublished": "2023-01-23T14:48:05.590Z", "dateUpdated": "2025-04-03T19:12:48.241Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2023-01-23T14:48:05.590Z"}, "title": "Multiple themes - Unauthenticated Arbitrary File Upload", "problemTypes": [{"descriptions": [{"description": "CWE-434 Unrestricted Upload of File with Dangerous Type", "lang": "en", "type": "CWE"}]}], "affected": [{"vendor": "Unknown", "product": "WeStand", "versions": [{"status": "affected", "versionType": "custom", "version": "0", "lessThan": "2.1"}], "defaultStatus": "unaffected"}, {"vendor": "Unknown", "product": "footysquare", "versions": [{"status": "affected", "versionType": "custom", "version": "0", "lessThanOrEqual": "*"}], "defaultStatus": "affected"}, {"vendor": "Unknown", "product": "aidreform", "versions": [{"status": "affected", "versionType": "custom", "version": "0", "lessThanOrEqual": "*"}], "defaultStatus": "affected"}, {"vendor": "Unknown", "product": "statfort", "versions": [{"status": "affected", "versionType": "custom", "version": "0", "lessThanOrEqual": "*"}], "defaultStatus": "affected"}, {"vendor": "Unknown", "product": "club-theme", "versions": [{"status": "affected", "versionType": "custom", "version": "0", "lessThanOrEqual": "*"}], "defaultStatus": "affected"}, {"vendor": "Unknown", "product": "kingclub-theme", "versions": [{"status": "affected", "versionType": "custom", "version": "0", "lessThanOrEqual": "*"}], "defaultStatus": "affected"}, {"vendor": "Unknown", "product": "spikes", "versions": [{"status": "affected", "versionType": "custom", "version": "0", "lessThanOrEqual": "*"}], "defaultStatus": "affected"}, {"vendor": "Unknown", "product": "spikes-black", "versions": [{"status": "affected", "versionType": "custom", "version": "0", "lessThanOrEqual": "*"}], "defaultStatus": "affected"}, {"vendor": "Unknown", "product": "soundblast", "versions": [{"status": "affected", "versionType": "custom", "version": "0", "lessThanOrEqual": "*"}], "defaultStatus": "affected"}, {"vendor": "Unknown", "product": "bolster", "versions": [{"status": "affected", "versionType": "custom", "version": "0", "lessThanOrEqual": "*"}], "defaultStatus": "affected"}], "descriptions": [{"lang": "en", "value": "The WeStand WordPress theme before 2.1, footysquare WordPress theme, aidreform WordPress theme, statfort WordPress theme, club-theme WordPress theme, kingclub-theme WordPress theme, spikes WordPress theme, spikes-black WordPress theme, soundblast WordPress theme, bolster WordPress theme from ChimpStudio and PixFill does not have any authorisation and upload validation in the lang_upload.php file, allowing any unauthenticated attacker to upload arbitrary files to the web server."}], "references": [{"url": "https://wpscan.com/vulnerability/9ab3d6cf-aad7-41bc-9aae-dc5313f12f7c", "tags": ["exploit", "vdb-entry", "technical-description"]}], "credits": [{"lang": "en", "value": "Joshua Small", "type": "finder"}, {"lang": "en", "value": "WPScan", "type": "coordinator"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "WPScan CVE Generator"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:25:39.589Z"}, "title": "CVE Program Container", "references": [{"url": "https://wpscan.com/vulnerability/9ab3d6cf-aad7-41bc-9aae-dc5313f12f7c", "tags": ["exploit", "vdb-entry", "technical-description", "x_transferred"]}]}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-04-02T14:35:32.713762Z", "id": "CVE-2022-0316", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-03T19:12:48.241Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2022-0316", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "state": "PUBLISHED", "assignerShortName": "WPScan", "dateReserved": "2022-01-20T09:29:34.686Z", "datePublished": "2023-01-23T14:48:05.590Z", "dateUpdated": "2025-04-03T19:12:48.241Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2023-01-23T14:48:05.590Z"}, "title": "Multiple themes - Unauthenticated Arbitrary File Upload", "problemTypes": [{"descriptions": [{"description": "CWE-434 Unrestricted Upload of File with Dangerous Type", "lang": "en", "type": "CWE"}]}], "affected": [{"vendor": "Unknown", "product": "WeStand", "versions": [{"status": "affected", "versionType": "custom", "version": "0", "lessThan": "2.1"}], "defaultStatus": "unaffected"}, {"vendor": "Unknown", "product": "footysquare", "versions": [{"status": "affected", "versionType": "custom", "version": "0", "lessThanOrEqual": "*"}], "defaultStatus": "affected"}, {"vendor": "Unknown", "product": "aidreform", "versions": [{"status": "affected", "versionType": "custom", "version": "0", "lessThanOrEqual": "*"}], "defaultStatus": "affected"}, {"vendor": "Unknown", "product": "statfort", "versions": [{"status": "affected", "versionType": "custom", "version": "0", "lessThanOrEqual": "*"}], "defaultStatus": "affected"}, {"vendor": "Unknown", "product": "club-theme", "versions": [{"status": "affected", "versionType": "custom", "version": "0", "lessThanOrEqual": "*"}], "defaultStatus": "affected"}, {"vendor": "Unknown", "product": "kingclub-theme", "versions": [{"status": "affected", "versionType": "custom", "version": "0", "lessThanOrEqual": "*"}], "defaultStatus": "affected"}, {"vendor": "Unknown", "product": "spikes", "versions": [{"status": "affected", "versionType": "custom", "version": "0", "lessThanOrEqual": "*"}], "defaultStatus": "affected"}, {"vendor": "Unknown", "product": "spikes-black", "versions": [{"status": "affected", "versionType": "custom", "version": "0", "lessThanOrEqual": "*"}], "defaultStatus": "affected"}, {"vendor": "Unknown", "product": "soundblast", "versions": [{"status": "affected", "versionType": "custom", "version": "0", "lessThanOrEqual": "*"}], "defaultStatus": "affected"}, {"vendor": "Unknown", "product": "bolster", "versions": [{"status": "affected", "versionType": "custom", "version": "0", "lessThanOrEqual": "*"}], "defaultStatus": "affected"}], "descriptions": [{"lang": "en", "value": "The WeStand WordPress theme before 2.1, footysquare WordPress theme, aidreform WordPress theme, statfort WordPress theme, club-theme WordPress theme, kingclub-theme WordPress theme, spikes WordPress theme, spikes-black WordPress theme, soundblast WordPress theme, bolster WordPress theme from ChimpStudio and PixFill does not have any authorisation and upload validation in the lang_upload.php file, allowing any unauthenticated attacker to upload arbitrary files to the web server."}], "references": [{"url": "https://wpscan.com/vulnerability/9ab3d6cf-aad7-41bc-9aae-dc5313f12f7c", "tags": ["exploit", "vdb-entry", "technical-description"]}], "credits": [{"lang": "en", "value": "Joshua Small", "type": "finder"}, {"lang": "en", "value": "WPScan", "type": "coordinator"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "WPScan CVE Generator"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:25:39.589Z"}, "title": "CVE Program Container", "references": [{"url": "https://wpscan.com/vulnerability/9ab3d6cf-aad7-41bc-9aae-dc5313f12f7c", "tags": ["exploit", "vdb-entry", "technical-description", "x_transferred"]}]}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2022-0316", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-04-02T14:35:32.713762Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-02T14:35:58.671Z"}}]}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:aidreform_project:aidreform:-:*:*:*:*:wordpress:*:*", "matchCriteriaId": "349B3C5A-3C95-4C80-9C09-DCFE002CB048", "vulnerable": true}, {"criteria": "cpe:2.3:a:chimpgroup:bolster:-:*:*:*:*:wordpress:*:*", "matchCriteriaId": "CD32D146-AE32-4F24-BB13-034D0BCEE102", "vulnerable": true}, {"criteria": "cpe:2.3:a:chimpgroup:spikes:-:*:*:*:*:wordpress:*:*", "matchCriteriaId": "692D91D4-FE19-4C7B-A0C2-8ADFF4EF3DA0", "vulnerable": true}, {"criteria": "cpe:2.3:a:chimpgroup:westand:*:*:*:*:*:wordpress:*:*", "matchCriteriaId": "82C6F1C1-034D-41D4-B1B0-E97E860F60BE", "versionEndExcluding": "2.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:club-theme_project:club-theme:-:*:*:*:*:wordpress:*:*", "matchCriteriaId": "62CF701B-A5BF-4A80-A1DA-D7BD3DCC62B3", "vulnerable": true}, {"criteria": "cpe:2.3:a:footysquare_project:footysquare:-:*:*:*:*:wordpress:*:*", "matchCriteriaId": "E8492E39-28B9-4291-86A9-CA7C883EA483", "vulnerable": true}, {"criteria": "cpe:2.3:a:pixfill:kings_club:-:*:*:*:*:wordpress:*:*", "matchCriteriaId": "241E870E-DBF9-442A-A2E8-335375EB3995", "vulnerable": true}, {"criteria": "cpe:2.3:a:soundblast_project:soundblast:-:*:*:*:*:wordpress:*:*", "matchCriteriaId": "8E8B3706-CC83-422D-8F3E-35E454B25C9B", "vulnerable": true}, {"criteria": "cpe:2.3:a:spikes-black_project:spikes-black:-:*:*:*:*:wordpress:*:*", "matchCriteriaId": "F95938E5-CC29-453F-8C22-0AF971A7CE76", "vulnerable": true}, {"criteria": "cpe:2.3:a:statfort_project:statfort:-:*:*:*:*:wordpress:*:*", "matchCriteriaId": "B9E2332D-410F-4765-8C6E-6A0FB07795CE", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The WeStand WordPress theme before 2.1, footysquare WordPress theme, aidreform WordPress theme, statfort WordPress theme, club-theme WordPress theme, kingclub-theme WordPress theme, spikes WordPress theme, spikes-black WordPress theme, soundblast WordPress theme, bolster WordPress theme from ChimpStudio and PixFill does not have any authorisation and upload validation in the lang_upload.php file, allowing any unauthenticated attacker to upload arbitrary files to the web server."}, {"lang": "es", "value": "El tema WeStand de WordPress anterior a 2.1, el tema de WordPress footysquare, el tema de WordPress Aidreform, el tema de WordPress statfort, el tema de WordPress con tema club, el tema de WordPress con tema kingclub, el tema de WordPress Spikes, el tema de WordPress Spikes-Black, el tema de WordPress Soundblast, el tema de WordPress de refuerzo de ChimpStudio y PixFill no tiene ninguna autorizaci\u00f3n ni validaci\u00f3n de carga en el archivo lang_upload.php, lo que permite que cualquier atacante no autenticado cargue archivos arbitrarios al servidor web."}], "id": "CVE-2022-0316", "lastModified": "2025-04-03T20:15:16.417", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2023-01-23T15:15:13.703", "references": [{"source": "contact@wpscan.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://wpscan.com/vulnerability/9ab3d6cf-aad7-41bc-9aae-dc5313f12f7c"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://wpscan.com/vulnerability/9ab3d6cf-aad7-41bc-9aae-dc5313f12f7c"}], "sourceIdentifier": "contact@wpscan.com", "vulnStatus": "Modified"}