Логотип exploitDog
bind:CVE-2022-0863
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-0863

Количество 2

Количество 2

nvd логотип

CVE-2022-0863

больше 3 лет назад

The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high privileged user like an admin to upload a zip file containing malicious php code, leading to remote code execution.

CVSS3: 7.2
EPSS: Средний
github логотип

GHSA-554p-mpfq-v2c5

больше 3 лет назад

The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high privileged user like an admin to upload a zip file containing malicious php code, leading to remote code execution.

CVSS3: 7.2
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2022-0863

The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high privileged user like an admin to upload a zip file containing malicious php code, leading to remote code execution.

CVSS3: 7.2
13%
Средний
больше 3 лет назад
github логотип
GHSA-554p-mpfq-v2c5

The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high privileged user like an admin to upload a zip file containing malicious php code, leading to remote code execution.

CVSS3: 7.2
13%
Средний
больше 3 лет назад

Уязвимостей на страницу