CVE:CVE-2022-0316
CNNVD:CNNVD-202301-1733
WordPress是WordPress基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress theme是WordPress的一款主题。
多款WordPress theme存在代码问题漏洞，该漏洞源于来自 ChimpStudio 和 PixFill 的多个主题在 lang_upload.php 文件中没有任何授权和上传验证，允许任何未经身份验证的攻击者上传任意文件到 Web 服务器。
solution:Upgrade aidreform_project aidreform to a higher version than -; Upgrade chimpgroup bolster to a higher version than -; Upgrade chimpgroup spikes to a higher version than -; Upgrade chimpgroup westand to a higher version than 2.1,and avoid the version (,2.1); Upgrade club-theme_project club-theme to a higher version than -; Upgrade footysquare_project footysquare to a higher version than -; Upgrade pixfill kings_club to a higher version than -; Upgrade soundblast_project soundblast to a higher version than -; Upgrade spikes-black_project spikes-black to a higher version than -; Upgrade statfort_project statfort to a higher version than -