CVE-2023-29102: WordPress Olive One Click Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload
Published Dec 20, 2023
·Updated
Unrestricted Upload of File with Dangerous Type vulnerability in Olive Themes Olive One Click Demo Import.This issue affects Olive One Click Demo Import: from n/a through 1.1.1.
Affected Software
1 affected component
olivethemes Olive One Click Demo Import Wordpress<=1.1.1
Event History
Dec 20, 2023
CVE Published
via MITRE·07:09 PM
Data Sourced
via MITRE·07:09 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-29102?
CVE-2023-29102 is rated as critical due to its potential for unrestricted file uploads of dangerous types.
2
How do I fix CVE-2023-29102?
To fix CVE-2023-29102, upgrade the Olive One Click Demo Import plugin to version 1.1.2 or later.
3
What versions of Olive One Click Demo Import are affected by CVE-2023-29102?
CVE-2023-29102 affects Olive One Click Demo Import versions from n/a through 1.1.1.
4
What kind of attacks can CVE-2023-29102 lead to?
CVE-2023-29102 can lead to remote code execution and potential full server compromise due to arbitrary file uploads.
5
Is there a workaround for CVE-2023-29102?
The best workaround for CVE-2023-29102 is to disable the plugin until it can be updated.