The GREYD.SUITE WordPress theme does... CVE-2022-2180

- AV AC AU C I A
发布： 2022-08-15
修订： 2024-11-21

The GREYD.SUITE WordPress theme does not properly validate uploaded custom font packages, and does not perform any authorization or csrf checks, allowing an unauthenticated attacker to upload arbitrary files including php source files, leading to possible remote code execution (RCE).

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有1条受影响产品信息