CVE-2022-1939
Allow SVG Files < 1.1 - Admin+ Arbitrary File Upload
HIGH 7.2EPSS 1.4%
The Allow svg files WordPress plugin before 1.1 does not properly validate uploaded files, which could allow high privilege users such as admin to upload PHP files even when they are not allowed to
- Affected
- Allow svg files
- CVSS v3.1 NVD
- 7.2 HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 6.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P - EPSS
- 1.45% chance of exploitation in the next 30 days, 73rd percentile
- Published
- 2022-06-20
- Updated
- 2024-08-03