CVE-2025-32496

9.6

Critical

CVE-2025-32496

9 Apr 2025

audit@patchstack.com

Awaiting Analysis

Description

Cross-Site Request Forgery (CSRF) vulnerability in Uncodethemes Ultra Demo Importer allows Upload a Web Shell to a Web Server. This issue affects Ultra Demo Importer: from n/a through 1.0.5.

Exploits

No known exploits found for this CVE.

Search Exploit-DB

References

audit@patchstack.com

https://patchstack.com/database/wordpress/plugin/ut-demo-importer/vulnerability/wordpress-ultra-demo-importer-plugin-1-0-5-csrf-to-rce-vulnerability?_s_id=cve