CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2022-0316
Critical (9.8). EPSS 2.1% chance of exploitation in the next 30 days.
The WeStand WordPress theme before 2.1, footysquare WordPress theme, aidreform WordPress theme, statfort WordPress theme, club-theme WordPress theme, kingclub-theme WordPress theme, spikes WordPress theme, spikes-black WordPress theme, soundblast WordPress theme, bolster WordPress theme from ChimpStudio and PixFill does not have any authorisation and upload validation in the lang_upload.php file, allowing any unauthenticated attacker to upload arbitrary files to the web server.
Severity
- EPSS
- 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- aidreform_project:aidreform
- chimpgroup:bolster
- chimpgroup:spikes
- chimpgroup:westand
- club-theme_project:club-theme
- footysquare_project:footysquare
- pixfill:kings_club
- soundblast_project:soundblast
- spikes-black_project:spikes-black
- statfort_project:statfort