Description
The WeStand WordPress theme before 2.1, footysquare WordPress theme, aidreform WordPress theme, statfort WordPress theme, club-theme WordPress theme, kingclub-theme WordPress theme, spikes WordPress theme, spikes-black WordPress theme, soundblast WordPress theme, bolster WordPress theme from ChimpStudio and PixFill does not have any authorisation and upload validation in the lang_upload.php file, allowing any unauthenticated attacker to upload arbitrary files to the web server.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Unknown WeStand
Default version status: unaffected
0 to < 2.1affected
Unknown footysquare
Default version status: affected
0 to ≤ *affected
Unknown aidreform
Default version status: affected
0 to ≤ *affected
Unknown statfort
Default version status: affected
0 to ≤ *affected
Unknown club-theme
Default version status: affected
0 to ≤ *affected
Unknown kingclub-theme
Default version status: affected
0 to ≤ *affected
Unknown spikes
Default version status: affected
0 to ≤ *affected
Unknown spikes-black
Default version status: affected
0 to ≤ *affected
Unknown soundblast
Default version status: affected
0 to ≤ *affected
Unknown bolster
Default version status: affected
0 to ≤ *affected