CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects WordPress. Its EPSS score suggests a 21.2% probability of exploitation in the next 30 days. Exploitation may require the attacker to be authenticated.
CVE
CVE-2022-3921
Severity
CRITICAL
CVSS
9.8
EPSS
21.20%
WordPress
Original NVD Description
The Listingo WordPress theme before 3.2.7 does not validate files to be uploaded via an AJAX action available to unauthenticated users, which could allow them to upload arbitrary files and lead to RCE