Evil-DB LogoEvil-DB
← All CVEs

CVE-2022-3921

critical · 9.8

The Listingo WordPress theme before 3.2.7 does not validate files to be uploaded via an AJAX action available to unauthenticated users, which could allow them to upload arbitrary files and lead to RCE

9.8
CVSS
21.2%
EPSS (exploit prob.)
97th
EPSS percentile
2022-12-12
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

VendorProductAffected versions
themographicslistingo< 3.2.7

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2022-3921