{"id":"CVE-2020-36849","aliases":["EUVD-2020-30798","GHSA-p27j-qf57-7cm7"],"status":"published","title":"AIT CSV import/export \u003c= 3.0.3 - Unauthenticated Arbitrary File Upload","description":"The AIT CSV import/export plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the /wp-content/plugins/ait-csv-import-export/admin/upload-handler.php file in versions up to, and including, 3.0.3. This makes it possible for unauthorized attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.07992,"percentile":0.94799,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-434"],"published":"2025-07-12T11:23:40Z","modified":"2026-06-17T03:16:19Z","exploits":[{"source":"metasploit","id":"exploit/multi/http/wp_ait_csv_rce","title":"WordPress AIT CSV Import Export Unauthenticated Remote Code Execution","type":"exploit","platform":"PHP","date":"2020-11-14","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/multi/http/wp_ait_csv_rce"}],"products":[{"vendor":"ait themes","product":"ait csv import/export"},{"vendor":"ait-themes","product":"csv_import_\\/_export"}],"references":[{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/cece751c-400d-42b4-9438-950d5aca51fc?source=cve","tags":["Third Party Advisory"]},{"url":"https://www.ait-themes.club/wordpress-plugins/csv-import-export/","tags":["Product"]},{"url":"https://www.acunetix.com/vulnerabilities/web/wordpress-plugin-ait-themes-csv-import-export-arbitrary-file-upload-3-0-3/","tags":["Vendor Advisory"]},{"url":"https://wpscan.com/vulnerability/36e699a4-91f2-426d-ba14-26036fbfeaea","tags":["Exploit"]},{"url":"https://github.com/rapid7/metasploit-framework/blob/master//modules/exploits/multi/http/wp_ait_csv_rce.rb","tags":["Exploit"]},{"url":"https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/wp_ait_csv_rce.rb","tags":["exploit","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36849"},{"url":"https://www.acunetix.com/vulnerabilities/web/wordpress-plugin-ait-themes-csv-import-export-arbitrary-file-upload-3-0-3"},{"url":"https://www.ait-themes.club/wordpress-plugins/csv-import-export"},{"url":"https://github.com/advisories/GHSA-p27j-qf57-7cm7"}],"sources":{"cve":[{"id":"CVE-2020-36849","title":"AIT CSV import/export \u003c= 3.0.3 - Unauthenticated Arbitrary File Upload","description":"The AIT CSV import/export plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the /wp-content/plugins/ait-csv-import-export/admin/upload-handler.php file in versions up to, and including, 3.0.3. This makes it possible for unauthorized attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.","status":"published","published":"2025-07-12T11:23:40.285Z","modified":"2026-04-08T17:24:31.42Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:35:54.80237Z"}],"euvd":[{"id":"EUVD-2020-30798","description":"The AIT CSV import/export plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the /wp-content/plugins/ait-csv-import-export/admin/upload-handler.php file in versions up to, and including, 3.0.3. This makes it possible for unauthorized attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.","status":"published","published":"2025-07-12T11:23:40Z","modified":"2026-04-08T17:24:31Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:24:39.649332Z"}],"ghsa":[{"id":"GHSA-p27j-qf57-7cm7","title":"The AIT CSV import/export plugin for WordPress is vulnerable to arbitrary file uploads due to...","description":"The AIT CSV import/export plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the /wp-content/plugins/ait-csv-import-export/admin/upload-handler.php file in versions up to, and including, 3.0.3. This makes it possible for unauthorized attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.","status":"published","published":"2025-07-12T12:30:20Z","modified":"2025-07-12T12:30:26Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T15:02:59.952815Z"}],"nvd":[{"id":"CVE-2020-36849","description":"The AIT CSV import/export plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the /wp-content/plugins/ait-csv-import-export/admin/upload-handler.php file in versions up to, and including, 3.0.3. This makes it possible for unauthorized attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.","status":"published","published":"2025-07-12T12:15:25.57Z","modified":"2026-06-17T03:16:19.52Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:06:48.591569Z"}]}}