Lucene search
PRIOn knowledge basePRION:CVE-2022-2180HistoryAug 15, 2022 - 11:21 a.m.
Cross site request forgery (csrf)
2022-08-1511:21:00
PRIOn knowledge base
www.prio-n.com
2
wordpress
greyd.suite
file upload
remote code execution
cross site request forgery
The GREYD.SUITE WordPress theme does not properly validate uploaded custom font packages, and does not perform any authorization or csrf checks, allowing an unauthenticated attacker to upload arbitrary files including php source files, leading to possible remote code execution (RCE).
| CPE | Name | Operator | Version |
|---|---|---|---|
| greyd.suite | lt | 1.2.7 |
Related
wpvulndb
wpvulndb
GREYD.SUITE < 1.2.7 - Unauthenticated File Upload to RCE
2022-07-21 00:00:00
wpexploit
wpexploit
GREYD.SUITE < 1.2.7 - Unauthenticated File Upload to RCE
2022-07-21 00:00:00
nvd
nvd
CVE-2022-2180
2022-08-15 11:21:17
patchstack
patchstack
cvelist
cvelist
CVE-2022-2180 GREYD.SUITE < 1.2.7 - Unauthenticated File Upload to RCE
2022-08-15 08:36:24
cve
cve
CVE-2022-2180
2022-08-15 11:21:17