Zozothemes Corpkit Unrestricted File Upload Vulnerability Allowing Web Shells
Vulnerability
A vulnerability allowing unrestricted file uploads of dangerous types has been identified in the Zozothemes Corpkit WordPress theme, specifically in versions through 2.0. This vulnerability enables the upload of a web shell to the web server.
Impact
Exploitation of this vulnerability allows for arbitrary file uploads, which could be used to upload and execute malicious scripts or web shells on the server.
Added: Jan 8, 2026, 10:33 AM
Updated: Jan 8, 2026, 7:11 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
7.4remediation
0.0relevance
1.9threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.