Lucene search
Raad HaddadPATCHSTACK:FD07AE3D8969C03CA7CA139C75FA73AAHistoryJul 12, 2022 - 12:00 a.m.
WordPress User Private Files plugin <= 1.1.2 - Authenticated Arbitrary File Upload vulnerability
2022-07-1200:00:00
Raad Haddad
patchstack.com
8
0.001 Low
EPSS
Percentile
43.0%
Authenticated Arbitrary File Upload vulnerability discovered by Raad Haddad in WordPress User Private Files plugin (versions <= 1.1.2).
Solution
Update the WordPress User Private Files plugin to the latest available version (at least 1.1.3).
| CPE | Name | Operator | Version |
|---|---|---|---|
| user private files | le | 1.1.2 |
Related
cvelist
cvelist
CVE-2022-2356 User Private Files < 1.1.3 - Subscriber+ Arbitrary File Upload
2022-08-08 13:46:51
cve
cve
CVE-2022-2356
2022-08-08 14:15:08
wpvulndb
wpvulndb
User Private Files < 1.1.3 - Subscriber+ Arbitrary File Upload
2022-07-12 00:00:00
nvd
nvd
CVE-2022-2356
2022-08-08 14:15:08
wpexploit
wpexploit
User Private Files < 1.1.3 - Subscriber+ Arbitrary File Upload
2022-07-12 00:00:00
prion
prion
Code injection
2022-08-08 14:15:00