CVE-2022-1939 Allow SVG Files < 1.1 - Admin+ Arbitrary File Upload

2022-06-2010:26:20

CWE-434

WPScan

www.cve.org

0.001 Low

EPSS

Percentile

43.0%

JSON

The Allow svg files WordPress plugin before 1.1 does not properly validate uploaded files, which could allow high privilege users such as admin to upload PHP files even when they are not allowed to

CNA Affected

[
  {
    "product": "Allow svg files",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.1",
        "status": "affected",
        "version": "1.1",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/4d7b62e1-558b-4504-a6e2-78246a8b554f

0.001 Low

EPSS

Percentile

43.0%

JSON

Related for CVELIST:CVE-2022-1939