CVE-2022-0316: Aidreform Project Aidreform

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

The WeStand WordPress theme before 2.1, footysquare WordPress theme, aidreform WordPress theme, statfort WordPress theme, club-theme WordPress theme, kingclub-theme WordPress theme, spikes WordPress theme, spikes-black WordPress theme, soundblast WordPress theme, bolster WordPress theme from ChimpStudio and PixFill does not have any authorisation and upload validation in the lang_upload.php file, allowing any unauthenticated attacker to upload arbitrary files to the web server.

Affected products

• Aidreform Project Aidreform: affected versions not specified
• Chimpgroup Bolster: affected versions not specified
• Chimpgroup Spikes: affected versions not specified
• Chimpgroup Westand: before 2.1 (fixed in 2.1)
• Club-Theme Project Club-Theme: affected versions not specified
• Footysquare Project Footysquare: affected versions not specified
• Pixfill Kings Club: affected versions not specified
• Soundblast Project Soundblast: affected versions not specified
• Spikes-Black Project Spikes-Black: affected versions not specified
• Statfort Project Statfort: affected versions not specified

Published 2023-01-23. Last modified 2026-06-17.