High severity7.2NVD Advisory· Published Apr 11, 2022· Updated Jun 17, 2026
CVE-2022-1008
CVE-2022-1008
Description
The One Click Demo Import WordPress plugin before 3.1.0 does not validate the imported file, allowing high privilege users such as admin to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disallowed
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <3.1.0
- Range: 3.1.0
Patches
Vulnerability mechanics
References
2- plugins.trac.wordpress.org/changeset/2695999nvdPatchThird Party Advisory
- wpscan.com/vulnerability/0c2e2b4d-49eb-4fd9-b9f0-3feae80c1082nvdExploitPatchThird Party Advisory
News mentions
0No linked articles in our index yet.