Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-57165
HistoryJun 22, 2022 - 12:00 a.m.

WordPress Allow svg files plugin file upload vulnerability

2022-06-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
30
wordpress
file upload
vulnerability
php
mysql
plugin
exploit
security flaw

EPSS

0.001

Percentile

42.9%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress plugin is an application plugin. WordPress Allow svg files plugin versions prior to 1.1 contain a file upload vulnerability that stems from the inability to properly validate uploaded files. An attacker could exploit this vulnerability to upload PHP files.

EPSS

0.001

Percentile

42.9%

Related for CNVD-2022-57165