CVE-2022-1103

Advanced Uploader <= 4.2 - Subscriber+ Arbitrary File Upload PUBLISHED

Description (CNA)

The Advanced Uploader WordPress plugin through 4.2 allows any authenticated users like subscriber to upload arbitrary files, such as PHP, which could lead to RCE

Affected (CNA)

Vendor / product	Versions
Unknown / Advanced uploader	affected 4.2 through 4.2

CWE

CWE-434

References

https://wpscan.com/vulnerability/9ddeef95-7c7f-4296-a55b-fd3304c91c18

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/9ddeef95-7c7f-4296-a55b-fd3304c91c18