CVE-2022-3416

WPtouch < 4.3.45 - Admin+ Arbitrary File Upload

High · published January 9, 2023

CVSS v3.1
7.2
EPSS
17%
Percentile
97.1
In the wild
Unconfirmed
What it is

The WPtouch WordPress plugin before 4.3.45 does not properly validate images to be uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.17285 · 97.1th percentile
Published
2023-01-09T22:13Z
EPSS history
Timeline
  • 09 JAN 22:13Z
    WPtouch < 4.3.45 - Admin+ Arbitrary File Upload
    cvelistv5