Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-57165
HistoryJun 22, 2022 - 12:00 a.m.

WordPress Allow svg files plugin file upload vulnerability

2022-06-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
28

0.001 Low

EPSS

Percentile

43.0%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress plugin is an application plugin. WordPress Allow svg files plugin versions prior to 1.1 contain a file upload vulnerability that stems from the inability to properly validate uploaded files. An attacker could exploit this vulnerability to upload PHP files.

CPENameOperatorVersion
wordpress allow svg files pluginlt1.1

0.001 Low

EPSS

Percentile

43.0%

Related for CNVD-2022-57165