CVE Database /
CVE-2021-39317
CVE · High
CVE-2021-39317 — Access Demo Importer [access-demo-importer] <= 1.0.6 (closed)
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2021-39317
|
Access Demo Importer [access-demo-importer] <= 1.0.6 (closed) |
Improper Authorization |
High
8.8
|
< 1.0.7
|
1.0.7 |
2021-10-06 |
—
|
CVE-2021-39317
The Access Demo Importer plugin version 1.0.6 and earlier contains an arbitrary file upload vulnerability in the plugin_offline_installer AJAX action due to missing permission validation in the plugin_offline_installer_callback function located in the demo-functions.php file. An attacker can exploit this flaw to upload malicious files to the affected WordPress installation. The vulnerability also affects numerous AccessPress Themes products in their specified versions.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings