CVE-2022-2594 Advanced Custom Fields 5.0-5.12.2 - Unauthenticated File Upload

2022-08-2215:05:03

CWE-434

WPScan

www.cve.org

8.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.2%

JSON

The Advanced Custom Fields WordPress plugin before 5.12.3, Advanced Custom Fields Pro WordPress plugin before 5.12.3 allows unauthenticated users to upload files allowed in a default WP configuration (so PHP is not possible) if there is a frontend form available. This vulnerability was introduced in the 5.0 rewrite and did not exist prior to that release.

CNA Affected

[
  {
    "product": "Advanced Custom Fields",
    "vendor": "TODO",
    "versions": [
      {
        "lessThan": "5.0*",
        "status": "affected",
        "version": "5.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.12.3",
        "status": "affected",
        "version": "5.12.3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Advanced Custom Fields Pro",
    "vendor": "TODO",
    "versions": [
      {
        "lessThan": "5.0*",
        "status": "affected",
        "version": "5.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.12.3",
        "status": "affected",
        "version": "5.12.3",
        "versionType": "custom"
      }
    ]
  }
]