CVE:CVE-2021-39317
CNNVD:CNNVD-202110-639
WordPress是WordPress（Wordpress）基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。uninstall是使用在其中一个用于完全卸载WordPress的插件。
WordPress 插件 存在代码问题漏洞，该漏洞源于 Access Demo Importer 插件在 ~/inc/demo-functions 中找到的 plugin_offline_installer_callback 函数中缺少功能检查。容易通过 plugin_offline_installer AJAX 操作进行任意文件上传。
solution:Upgrade accesspressthemes access_demo_importer to a higher version than 1.0.7,and avoid the version (,1.0.7); Upgrade accesspressthemes accesspress-lite to a higher version than 2.92,and avoid the version (,2.92]; Upgrade accesspressthemes accesspress-mag to a higher version than 2.6.5,and avoid the version (,2.6.5]; Upgrade accesspressthemes accesspress-parallax to a higher version than 4.5,and avoid the version (,4.5]; Upgrade accesspressthemes accesspress-root to a higher version than 2.5,and avoid the version (,2.5]; Upgrade accesspressthemes accesspress-store to a higher version than 2.4.9,and avoid the version (,2.4.9]; Upgrade accesspressthemes accesspress_basic to a higher version than 3.2.1,and avoid the version (,3.2.1]; Upgrade accesspressthemes agency-lite to a higher version than 1.1.6,and avoid the version (,1.1.6]; Upgrade accesspressthemes arrival to a higher version than 1.4.2,and avoid the version (,1.4.2]; Upgrade accesspressthemes bingle to a higher version than 1.0.4,and avoid the version (,1.0.4]; Upgrade accesspressthemes bloger to a higher version than 1.2.6,and avoid the version (,1.2.6]; Upgrade accesspressthemes brovy to a higher version than 1.3,and avoid the version (,1.3]; Upgrade accesspressthemes construction-lite to a higher version than 1.2.5,and avoid the version (,1.2.5]; Upgrade accesspressthemes doko to a higher version than 1.0.27,and avoid the version (,1.0.27]; Upgrade accesspressthemes edict-lite to a higher version than 1.1.4,and avoid the version (,1.1.4]; Upgrade accesspressthemes eight-sec to a higher version than 1.1.4,and avoid the version (,1.1.4]; Upgrade accesspressthemes eightlaw-lite to a higher version than 2.1.5,and avoid the version (,2.1.5]; Upgrade accesspressthemes eightmedi-lite to a higher version than 2.1.8,and avoid the version (,2.1.8]; Upgrade accesspressthemes eightstore-lite to a higher version than 1.2.5,and avoid the version (,1.2.5]; Upgrade accesspressthemes enlighten to a higher version than 1.3.5,and avoid the version (,1.3.5]; Upgrade accesspressthemes fotography to a higher version than 2.4.0,and avoid the version (,2.4.0]; Upgrade accesspressthemes opstore to a higher version than 1.4.3,and avoid the version (,1.4.3]; Upgrade accesspressthemes parallaxsome to a higher version than 1.3.6,and avoid the version (,1.3.6]; Upgrade accesspressthemes punte to a higher version than 1.1.2,and avoid the version (,1.1.2]; Upgrade accesspressthemes revolve to a higher version than 1.3.1,and avoid the version (,1.3.1]; Upgrade accesspressthemes ripple to a higher version than 1.2.0,and avoid the version (,1.2.0]; Upgrade accesspressthemes sakala to a higher version than 1.0.4,and avoid the version (,1.0.4]; Upgrade accesspressthemes scrollme to a higher version than 2.1.0,and avoid the version (,2.1.0]; Upgrade accesspressthemes storevilla to a higher version than 1.4.1,and avoid the version (,1.4.1]; Upgrade accesspressthemes swing-lite to a higher version than 1.1.9,and avoid the version (,1.1.9]; Upgrade accesspressthemes the-launcher to a higher version than 1.3.2,and avoid the version (,1.3.2]; Upgrade accesspressthemes the-monday to a higher version than 1.4.1,and avoid the version (,1.4.1]; Upgrade accesspressthemes the100 to a higher version than 1.1.2,and avoid the version (,1.1.2]; Upgrade accesspressthemes ultra-seven to a higher version than 1.2.8,and avoid the version (,1.2.8]; Upgrade accesspressthemes uncode-lite to a higher version than 1.3.3,and avoid the version (,1.3.3]; Upgrade accesspressthemes vmag to a higher version than 1.2.7,and avoid the version (,1.2.7]; Upgrade accesspressthemes vmagazine-lite to a higher version than 1.3.5,and avoid the version (,1.3.5]; Upgrade accesspressthemes vmagazine-news to a higher version than 1.0.5,and avoid the version (,1.0.5]; Upgrade accesspressthemes wp-store to a higher version than 1.1.9,and avoid the version (,1.1.9]; Upgrade accesspressthemes wpparallax to a higher version than 2.0.6,and avoid the version (,2.0.6]; Upgrade accesspressthemes zigcy-baby to a higher version than 1.0.6,and avoid the version (,1.0.6]; Upgrade accesspressthemes zigcy-cosmetics to a higher version than 1.0.5,and avoid the version (,1.0.5]; Upgrade accesspressthemes zigcy-lite to a higher version than 2.0.9,and avoid the version (,2.0.9]