CVE-2022-1103CWE-434

Advanced Uploader <= 4.2 - Subscriber+ Arbitrary File Upload

published May 16, 2022

CVSS
—
EPSS
16%
Percentile
96.8
In the wild
Unconfirmed
What it is

The Advanced Uploader WordPress plugin through 4.2 allows any authenticated users like subscriber to upload arbitrary files, such as PHP, which could lead to RCE

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.15553 · 96.8th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2022-05-16T14:30Z
EPSS history
Timeline
  • 16 MAY 14:30Z
    Advanced Uploader <= 4.2 - Subscriber+ Arbitrary File Upload
    cvelistv5