2 lines
2.2 KiB
JSON
2 lines
2.2 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"affected","product":"Axle Demo Importer","vendor":"Unknown","versions":[{"lessThanOrEqual":"1.0.3","status":"affected","version":"0","versionType":"semver"}]}],"source":"contact@wpscan.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:axlethemes:axle_demo_importer:*:*:*:*:*:wordpress:*:*","matchCriteriaId":"08BD3254-4E62-4EA5-8BC8-B5888870DFB8","versionEndIncluding":"1.0.3","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Axle Demo Importer WordPress plugin through 1.0.3 does not validate files to be uploaded, which could allow authenticated users (author and above) to upload arbitrary files such as PHP on the server"},{"lang":"es","value":"El complemento Axle Demo Importer de WordPress hasta la versión 1.0.3 no valida los archivos que se cargarán, lo que podría permitir que usuarios autenticados (autor y superiores) carguen archivos arbitrarios como PHP en el servidor."}],"id":"CVE-2025-4954","lastModified":"2026-06-17T09:34:23.310","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-4954","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-06-11T13:30:08.359531Z","version":"2.0.3"}}]},"published":"2025-06-10T06:15:22.403","references":[{"source":"contact@wpscan.com","tags":["Exploit","Third Party Advisory"],"url":"https://wpscan.com/vulnerability/673f35ff-e1d5-4099-86e7-8b6e3e410ef8/"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-434"}],"source":"nvd@nist.gov","type":"Primary"}]}
|