// For flags

CVE-2022-0316

Multiple themes - Unauthenticated Arbitrary File Upload

Severity Score

9.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

2
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The WeStand WordPress theme before 2.1, footysquare WordPress theme, aidreform WordPress theme, statfort WordPress theme, club-theme WordPress theme, kingclub-theme WordPress theme, spikes WordPress theme, spikes-black WordPress theme, soundblast WordPress theme, bolster WordPress theme from ChimpStudio and PixFill does not have any authorisation and upload validation in the lang_upload.php file, allowing any unauthenticated attacker to upload arbitrary files to the web server.

El tema WeStand de WordPress anterior a 2.1, el tema de WordPress footysquare, el tema de WordPress Aidreform, el tema de WordPress statfort, el tema de WordPress con tema club, el tema de WordPress con tema kingclub, el tema de WordPress Spikes, el tema de WordPress Spikes-Black, el tema de WordPress Soundblast, el tema de WordPress de refuerzo de ChimpStudio y PixFill no tiene ninguna autorización ni validación de carga en el archivo lang_upload.php, lo que permite que cualquier atacante no autenticado cargue archivos arbitrarios al servidor web.

Several themes from Chimpstudio and Pixfill are vulnerable to arbitrary file uploads due to missing file type validation and authorization in various versions. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.

*Credits: Joshua Small, WPScan
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2022-01-20 CVE Reserved
  • 2022-12-29 CVE Published
  • 2024-08-02 CVE Updated
  • 2024-08-02 First Exploit
  • 2024-12-17 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-434: Unrestricted Upload of File with Dangerous Type
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Aidreform Project
Search vendor "Aidreform Project"
 Aidreform
Search vendor "Aidreform Project" for product "Aidreform"
-wordpress
Affected
Chimpgroup
Search vendor "Chimpgroup"
 Bolster
Search vendor "Chimpgroup" for product "Bolster"
-wordpress
Affected
Chimpgroup
Search vendor "Chimpgroup"
 Spikes
Search vendor "Chimpgroup" for product "Spikes"
-wordpress
Affected
Chimpgroup
Search vendor "Chimpgroup"
 Westand
Search vendor "Chimpgroup" for product "Westand"
 < 2.1
Search vendor "Chimpgroup" for product "Westand" and version " < 2.1"
wordpress
Affected
Club-theme Project
Search vendor "Club-theme Project"
 Club-theme
Search vendor "Club-theme Project" for product "Club-theme"
-wordpress
Affected
Footysquare Project
Search vendor "Footysquare Project"
 Footysquare
Search vendor "Footysquare Project" for product "Footysquare"
-wordpress
Affected
Pixfill
Search vendor "Pixfill"
 Kings Club
Search vendor "Pixfill" for product "Kings Club"
-wordpress
Affected
Soundblast Project
Search vendor "Soundblast Project"
 Soundblast
Search vendor "Soundblast Project" for product "Soundblast"
-wordpress
Affected
Spikes-black Project
Search vendor "Spikes-black Project"
 Spikes-black
Search vendor "Spikes-black Project" for product "Spikes-black"
-wordpress
Affected
Statfort Project
Search vendor "Statfort Project"
 Statfort
Search vendor "Statfort Project" for product "Statfort"
-wordpress
Affected