Threats tagged 'ghsa-pvx9-4vfp-58m3'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.2	EPSS 0.5%	CVE-2026-13157Theme Demo Import · Unrestricted File Upload High7.2EPSS 0.5%2026-08-01CVE Database V5CVE-2026-13157 The Demo Import WordPress plugin through 1.1.3 does not validate the type of files uploaded during demo-content import (the WordPress file-type test is disabled), allowing high-privilege users (Administrator by default, including non-super-admin site administrators on multisite) to upload executable PHP files to the uploads directory. EPSS 0.5%Vulnerability CWE-434 #ghsa-pvx9-4vfp-58m3	CVE Database V5	2026-08-01

Page 1 of 1