Record status Published
Identifier year (not publication year) 2022
Source publication Jan 23, 2023
Source updated Apr 3, 2025
Imported by cveboard Oct 24, 2026
CNA source text (English) Multiple themes - Unauthenticated Arbitrary File Upload
The WeStand WordPress theme before 2.1, footysquare WordPress theme, aidreform WordPress theme, statfort WordPress theme, club-theme WordPress theme, kingclub-theme WordPress theme, spikes WordPress theme, spikes-black WordPress theme, soundblast WordPress theme, bolster WordPress theme from ChimpStudio and PixFill does not have any authorisation and upload validation in the lang_upload.php file, allowing any unauthenticated attacker to upload arbitrary files to the web server.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
WeStand
Vendor Unknown
Product WeStand
Platforms Unknown
Default status unaffected
WeStand · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 2.1 Unavailable None listed
footysquare
Vendor Unknown
Product footysquare
Platforms Unknown
Default status affected
footysquare · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom Unavailable * None listed
aidreform
Vendor Unknown
Product aidreform
Platforms Unknown
Default status affected
aidreform · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom Unavailable * None listed
statfort
Vendor Unknown
Product statfort
Platforms Unknown
Default status affected
statfort · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom Unavailable * None listed
club-theme
Vendor Unknown
Product club-theme
Platforms Unknown
Default status affected
club-theme · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom Unavailable * None listed
kingclub-theme
Vendor Unknown
Product kingclub-theme
Platforms Unknown
Default status affected
kingclub-theme · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom Unavailable * None listed
spikes
Vendor Unknown
Product spikes
Platforms Unknown
Default status affected
spikes · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom Unavailable * None listed
spikes-black
Vendor Unknown
Product spikes-black
Platforms Unknown
Default status affected
spikes-black · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom Unavailable * None listed
soundblast
Vendor Unknown
Product soundblast
Platforms Unknown
Default status affected
soundblast · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom Unavailable * None listed
bolster
Vendor Unknown
Product bolster
Platforms Unknown
Default status affected
bolster · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom Unavailable * None listed