CyberRota Analysis
AI analysis pending.
CVE
CVE-2022-3921
Severity
CRITICAL
CVSS
9.8
EPSS
21.20%
WordPress
Original NVD Description
The Listingo WordPress theme before 3.2.7 does not validate files to be uploaded via an AJAX action available to unauthenticated users, which could allow them to upload arbitrary files and lead to RCE