VULNERABILITY INTELLIGENCE

CVE-2022-1939

CVSS score7.2 HIGH
EPSS probability1.45%
CISA KEVNot currently listed
Published2022-06-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

The Allow svg files WordPress plugin before 1.1 does not properly validate uploaded files, which could allow high privilege users such as admin to upload PHP files even when they are not allowed to

Weakness classification

  • contact@wpscan.com: CWE-434

Primary references